CVE-2005-4412

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-20 · updated 2026-06-16

Description

Citrix Program Neighborhood client before 9.150 caches the user password in plaintext in the GUI while asterisks are used to visually obfuscate the password, which allows attackers with access to the session to obtain the password by using a tool to directly access the field.

Affected products

Citrix Program Neighborhood Client: through 9.1

References

http://securitytracker.com/id?1015372
http://support.citrix.com/article/CTX108108
http://securitytracker.com/id?1015372
http://support.citrix.com/article/CTX108108

Get alerted when CVE-2005-4412 or the next vulnerability affects your stack