CVE-2004-1902

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.

Affected (1)

Products: Citrix: Metaframe Password Manager

Citrix

1 product

Metaframe Password Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Citrix Metaframe Password Manager	Version 2.0

References (14)

http://marc.info/?l=bugtraq&m=108127948610311&w=2

Source: cve@mitre.org

http://secunia.com/advisories/11293

Source: cve@mitre.org

Patch

http://securitytracker.com/id?1009659

Source: cve@mitre.org

http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/4942

Source: cve@mitre.org

http://www.securityfocus.com/bid/10049

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15737

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=108127948610311&w=2