Citrix Metaframe Password Manager vulnerabilities

2 CVEs affecting Citrix Metaframe Password Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0822, published 2005-05-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0822, published 2005-05-02. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is…
CVE-2004-1902, published 2004-12-31. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows…