CVE-2021-22907

7.8HIGH

Key Information

Vendor
Citrix
Status
Citrix Workspace App For Windows
Vendor
CVE Published:
27 May 2021

Summary

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.

Affected Version(s)

Citrix Workspace App for Windows = Citrix Workspace App for Windows 2105 and 1912 LTSR CU4

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.