Vulnerability in Citrix Edgesight For Endpoints
CVE-2007-6267
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
EPSS: 0.004 (36.4th percentile) — read the EPSS interpretation.
Affected products
- Citrix Edgesight_for_endpoints — versions 4.2, 4.5
- Citrix Edgesight_for_netscaler — versions 1.0, 1.1
- Citrix Edgesight_for_presentation_server — versions 4.2, 4.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)