VULNERABILITY INTELLIGENCE

CVE-2008-5107

CVSS score1.9 LOW

EPSS probability0.30%

CISA KEVNot currently listed

Published2008-11-17

Last modified2026-06-16

CVSS vectorAV:L/AC:M/Au:N/C:P/I:N/A:N

Description

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

cve@mitre.org — Vendor Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required