CVE-2008-5107: Citrix Desktop Server

Low severity, CVSS 1.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials in MSI log files, which allows local users to obtain these credentials by reading the log files.

Affected products

• Citrix Desktop Server: version 1.0 only
• Citrix Presentation Server: version 4.5 only

Published 2008-11-17. Last modified 2026-06-16.