|
Citrix MetaFrame Password Manager "Reveal Password" Policy Bypass |
|
Tuesday, 15 March 2005
by Michel Roth
|
|
A new vulnerability was identified in Citrix MetaFrame Password Manager, which may be exploited by attackers to disclose sensitive information. Citrix MetaFrame Password Manager allows administrators to control which users can view their own secondary passwords even if they should be prohibited from doing so by the administrator defined policy. When viewing configured applications, the password field is displayed to the user as a series of asterisks, which may be exploited by a malicious user to extract the clear text password from this field.
Solution: Hotfix MPM250W006
Read more here.
|
