CVEvulnerability
CVE-2007-6267
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-255
Description
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
Affected configurations
• citrix edgesight for endpoints 4.2
• citrix edgesight for endpoints 4.5
• citrix edgesight for netscaler 1.0
• citrix edgesight for netscaler 1.1
• citrix edgesight for presentation server 4.2
• citrix edgesight for presentation server 4.5
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/27935 Vendor Advisory
- http://support.citrix.com/article/CTX115281 Patch
- http://www.securityfocus.com/bid/26705 Exploit, Patch
- http://www.securitytracker.com/id?1019050 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4091 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/27935 Vendor Advisory
- http://support.citrix.com/article/CTX115281 Patch
- http://www.securityfocus.com/bid/26705 Exploit, Patch
- http://www.securitytracker.com/id?1019050 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4091 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38861 exchange.xforce.ibmcloud.com