CVE-2005-0822
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is...
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
Exploit likelihood
What each source reports
NVD Score used
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
- Record
CVE-2005-0822- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
- Record
CVE-2005-0822- Updated
- 2026-11-02
EUVDEUVD-2005-0823 No score
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
- Record
EUVD-2005-0823- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-92g2-52fc-gp84 No score
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is...
Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which allows users to view their secondary passwords even if it is not allowed by policy.
- Record
GHSA-92g2-52fc-gp84- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0822 is a low vulnerability (CVSS 2.1) in Citrix Metaframe Password Manager, published March 20, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. No source names a fixed version.