Lucene search

K
cve[email protected]CVE-2007-6267
HistoryDec 07, 2007 - 11:46 a.m.

CVE-2007-6267

2007-12-0711:46:00
CWE-255
web.nvd.nist.gov
21
citrix
edgesight
cve-2007-6267
database security
information exposure
configuration files

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.

Affected configurations

NVD
Node
citrixedgesight_for_endpointsMatch4.2
OR
citrixedgesight_for_endpointsMatch4.5
OR
citrixedgesight_for_netscalerMatch1.0
OR
citrixedgesight_for_netscalerMatch1.1
OR
citrixedgesight_for_presentation_serverMatch4.2
OR
citrixedgesight_for_presentation_serverMatch4.5

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2007-6267