CVE-2007-6192

MEDIUM · CVSS 4.3 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-11-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-6192

Severity

MEDIUM

CVSS

4.3

EPSS

0.70%

Citrix

Original Filing — NVD Description

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack.