MetaFrame Password Manager "reveal password" policy bypass

Description of Problem Citrix MetaFrame Password Manager allows administrators to control which users can view their own secondary passwords. Versions 2.5 and earlier allow users to view their secondary passwords even if they should be prohibited from doing so by the administrator defined policy...

CVE-2005-0822: Undefined Security Weakness

Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy...