Users with only access to launch VDA applications can launch an unauthorized desktop
CVE-2023-24490

6.3MEDIUM

Key Information:

Vendor: Citrix
Status: Virtual Delivery Agents For Windows For Cvad And Citrix Daas Security; Virtual Delivery Agents For Linux For Cvad And Citrix Daas Security
Vendor: CVE Published:; 10 July 2023

What is CVE-2023-24490?

Users with only access to launch VDA applications can launch an unauthorized desktop

Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Current Release (CR) 0 < 2305

Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Long Term Service Release (LTSR) 0 < 2203 LTSR CU3

Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Long Term Service Release (LTSR) 0

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet