CVEvulnerability
CVE-2008-5107
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
Affected configurations
• citrix desktop server 1.0
• citrix presentation server 4.5
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://support.citrix.com/article/CTX116228 Vendor Advisory
- http://www.securityfocus.com/bid/28047 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0705/references Permissions Required
- http://support.citrix.com/article/CTX116228 Vendor Advisory
- http://www.securityfocus.com/bid/28047 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0705/references Permissions Required