VulnerabilityModified
CVE-2008-6561
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
LOW 1.9EPSS 0.29%
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
Citrix Presentation Server Client for Windows before 10.200 does not clear "credential information" from process memory in unspecified circumstances, which might allow local users to gain privileges.
- CVSS 2.0
- 1.9 LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 0.29% probability · 22th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- citrix/presentation server client
- Source
- cve@mitre.org
References
- http://support.citrix.com/article/CTX116227Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019605
- http://www.vupen.com/english/advisories/2008/0845
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41102
- http://support.citrix.com/article/CTX116227Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019605
- http://www.vupen.com/english/advisories/2008/0845
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41102
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.