CVE-2005-4412

Published Dec 20, 2005

Last updated 16 years ago

Overview

Description: Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:citrix:program_neighborhood_client:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "189820D6-2EA1-4359-BC9D-8CAF00660AD8",
            "versionEndIncluding": "9.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References