Lucene search
HistoryDec 07, 2007 - 11:46 a.m.
CVE-2007-6267
citrix
edgesight
cve-2007-6267
database security
information exposure
configuration files
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.
Affected configurations
Node
citrixedgesight_for_endpointsMatch4.2
ORcitrixedgesight_for_endpointsMatch4.5
ORcitrixedgesight_for_netscalerMatch1.0
ORcitrixedgesight_for_netscalerMatch1.1
ORcitrixedgesight_for_presentation_serverMatch4.2
ORcitrixedgesight_for_presentation_serverMatch4.5
Related
cvelist
cvelist
CVE-2007-6267
2007-12-07 11:00:00
prion
prion
Information disclosure
2007-12-07 11:46:00
nvd
nvd
CVE-2007-6267
2007-12-07 11:46:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-6267