vulnwire
1.9low

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credential…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
1.9
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 22%
Public exploits
0
none known

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

Exploit prediction (EPSS)

0.30% probability of exploitation in the next 30 days, higher than 22% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.01.9AV:L/AC:M/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • support.citrix.com /article/CTX116228 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2008/0705/references · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/28047 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.