CVE-2007-6267

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.

Link	Resource
http://support.citrix.com/article/CTX115281	Patch
http://www.securityfocus.com/bid/26705	Exploit Patch
http://secunia.com/advisories/27935	Vendor Advisory
http://www.securitytracker.com/id?1019050
http://www.vupen.com/english/advisories/2007/4091
https://exchange.xforce.ibmcloud.com/vulnerabilities/38861

Configuration 1

cpe:2.3:a:citrix:edgesight_for_presentation_server:4.5:*:*:*:*:*:*:* cpe:2.3:a:citrix:edgesight_for_netscaler:1.0:*:*:*:*:*:*:* cpe:2.3:a:citrix:edgesight_for_endpoints:4.2:*:*:*:*:*:*:* cpe:2.3:a:citrix:edgesight_for_netscaler:1.1:*:*:*:*:*:*:* cpe:2.3:a:citrix:edgesight_for_endpoints:4.5:*:*:*:*:*:*:* cpe:2.3:a:citrix:edgesight_for_presentation_server:4.2:*:*:*:*:*:*:*

---

Published : 2007-12-07 11:46

Updated : 2017-08-08 01:29

---

NVD link : CVE-2007-6267

Mitre link : CVE-2007-6267

No products.

CWE-255