CVE:CVE-2002-0301
CNNVD:CNNVD-200205-125
Citrix NFuse 1.6版本存在漏洞。远程攻击者通过直接调用带有有效NFUSE_USER和NFUSE_PASSWORD参数的launch.asp绕过认证且获取敏感信息。
solution:Upgrade citrix nfuse to a higher version than 1.6,and avoid the version 1.6