Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-1902 | First vendor Publication | 2004-12-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1902 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 4942 | Citrix MetaFrame Password Manager Password Disclosure MetaFrame Password Manager contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to application passwords which are stored encoded. This condition occures when the application passwords are entered immediately after the First Time Use Wizard and if no sync point has been defined for production configurations, which may lead to a loss of confidentiality and integrity. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:41 |
|
| 2024-11-28 12:06:26 |
|
| 2021-05-04 12:02:34 |
|
| 2021-04-22 01:02:46 |
|
| 2020-05-23 00:16:05 |
|
| 2017-07-11 12:01:40 |
|
| 2016-10-18 12:01:29 |
|
| 2016-06-28 15:08:26 |
|
| 2016-04-26 13:03:59 |
|
| 2013-05-11 11:46:48 |
|
