CVE-2008-5107

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-11-17 · updated 2026-06-16
Weakness: CWE-200

Description

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

Affected products

Citrix Desktop Server: 1.0 (and their updates)
Citrix Presentation Server: 4.5 (and their updates)

References

http://support.citrix.com/article/CTX116228
http://www.securityfocus.com/bid/28047
http://www.vupen.com/english/advisories/2008/0705/references
http://support.citrix.com/article/CTX116228
http://www.securityfocus.com/bid/28047
http://www.vupen.com/english/advisories/2008/0705/references

Get alerted when CVE-2008-5107 or the next vulnerability affects your stack