{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Citrix MetaFrame Secure Access Manager version 2.0, 2.1 et 2.2 ;","product":{"name":"N/A","vendor":{"name":"Citrix","scada":false}}},{"description":"Citrix NFuse Elite 1.0.","product":{"name":"N/A","vendor":{"name":"Citrix","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix MetaFrame Secure Access\nManager et Citrix NFuse Elite. Cette vuln\u00e9rabilit\u00e9 est localis\u00e9e dans le\ntraitement du champ username.\n\nCette vuln\u00e9rabilit\u00e9 peut \u00eatre exploit\u00e9e dans le but de conduire des\nattaques de type Cross Site Scripting.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[],"links":[{"title":"Lien du support Citrix :","url":"http://support.citrix.com"}],"reference":"CERTA-2005-AVI-477","revisions":[{"description":"version initiale.","revision_date":"2005-12-02T00:00:00.000000"}],"risks":[{"description":"Injection de code indirecte \u00e0 distance (XSS)"}],"summary":"Une vuln\u00e9rabilit\u00e9 permettant des attaques de type Cross Site Scripting a\n\u00e9t\u00e9 d\u00e9couverte dans Citrix.\n","title":"Vuln\u00e9rabilit\u00e9 de Citrix","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Citrix","url":"http://support.citrix.com/article/entry.jspa?entryID=8492"}]}