Design/Logic Flaw

2008-11-1718:18:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

CPENameOperatorVersion
desktop_servereq1.0
presentation_servereq4.5

CPE	Name	Operator	Version
	desktop_server	eq	1.0
	presentation_server	eq	4.5

References

support.citrix.com/article/CTX116228

www.securityfocus.com/bid/28047

www.vupen.com/english/advisories/2008/0705/references