1.9

CVE-2008-5107

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Desktop Server Version1.0
Citrix ≫ Presentation Server Version4.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.213
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://support.citrix.com/article/CTX116228
Vendor Advisory
http://www.securityfocus.com/bid/28047
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/0705/references
Permissions Required