CVE-2007-6267

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-07 · updated 2026-06-16
Weakness: CWE-255

Description

Citrix EdgeSight 4.2 and 4.5 for Presentation Server, EdgeSight 4.2 and 4.5 for Endpoints, and EdgeSight for NetScaler 1.0 and 1.1 do not properly store database credentials in configuration files, which allows local users to obtain sensitive information.

Affected products

Citrix Edgesight For Endpoints: 4.2, 4.5 (and their updates)
Citrix Edgesight For Netscaler: 1.0, 1.1 (and their updates)
Citrix Edgesight For Presentation Server: 4.2, 4.5 (and their updates)

References

http://secunia.com/advisories/27935
http://support.citrix.com/article/CTX115281
http://www.securityfocus.com/bid/26705
http://www.securitytracker.com/id?1019050
http://www.vupen.com/english/advisories/2007/4091
https://exchange.xforce.ibmcloud.com/vulnerabilities/38861
http://secunia.com/advisories/27935
http://support.citrix.com/article/CTX115281
http://www.securityfocus.com/bid/26705
http://www.securitytracker.com/id?1019050
http://www.vupen.com/english/advisories/2007/4091
https://exchange.xforce.ibmcloud.com/vulnerabilities/38861

Get alerted when CVE-2007-6267 or the next vulnerability affects your stack