Launchpad.net

CVE 2015-2682

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml.

See the CVE page on Mitre.org for more details.