low2.1
CVE-2007-6267
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store databa…
Impact
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Edgesight For Endpoints | Versions 4.2, 4.5 |
| Citrix | Edgesight For Netscaler | Versions 1.0, 1.1 |
| Citrix | Edgesight For Presentation Server | Versions 4.2, 4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/27935
- http://support.citrix.com/article/CTX115281
- http://www.securityfocus.com/bid/26705
- http://www.securitytracker.com/id?1019050
- http://www.vupen.com/english/advisories/2007/4091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861
- http://secunia.com/advisories/27935
- http://support.citrix.com/article/CTX115281
- http://www.securityfocus.com/bid/26705
- http://www.securitytracker.com/id?1019050
- http://www.vupen.com/english/advisories/2007/4091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861