|
User Interface Flaw In Program Neighborhood Could Leak Cached Passwords |
|
Friday, 16 December 2005
by Michel Roth
|
|
The Citrix Program Neighborhood client provides a mechanism to cache user passwords; a user interface flaw in this client could permit these cached passwords to be revealed to the user. The cached passwords are normally displayed to the user as a series of asterisks but it may be possible for the user to run a password viewing tool that can extract the clear text password from this field.
The following clients are affected by this issue:
• Citrix Program Neighborhood version 9.1 and earlier for 32-bit and 64-bit Windows
The Citrix Web client and the Citrix Program Neighborhood Agent client are not affected by this vulnerability.
Read CTX108108 here.
|