{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cTT\u003eCitrix MetaFrame Password Manager  2.x\u003c/TT\u003e.",
  "content": "## Description\n\nL\u0027utilisation de l\u0027assistant \u00ab premi\u00e8re utilisation \u00bb (First Time Use)\nde Citrix MetaFrame Password Manager entra\u00eene une faiblesse sur\nl\u0027enregistrement des mots de passe. En effet, ces mots de passe seront\nseulement encod\u00e9s et non chiffr\u00e9s.\n\nLe probl\u00e8me n\u0027existe pas si l\u0027administrateur a configur\u00e9 un point unique\npour le stockage des mots de passe.\n\n## Solution\n\nAppliquer le correctif (cf. section documentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Correctif MPME100W001 :",
      "url": "http://support.citrix.com/kb/entry.jspa?entryID=4062"
    }
  ],
  "reference": "CERTA-2004-AVI-108",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-04-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Acc\u00e8s \u00e0 des informations confidentielles"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans Citrix MetaFrame Password Manager 2.x\npermet \u00e0 un utilisateur mal intentionn\u00e9 de d\u00e9couvrir les informations\nd\u0027authentification.\n",
  "title": "Vuln\u00e9rabilit\u00e9 sur Citrix MetaFrame Password Manager",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 Citrix",
      "url": "http://support.citrix.com/kb/entry.jspa?entryID=4063\u0026categoryID=254"
    }
  ]
}