Citrix Workspace app for Windows vulnerable to Local Privilege Escalation Attack
CVE-2024-7889
7.3HIGH
Key Information:
- Vendor
- Citrix
- Status
- Citrix Workspace App For Windows
- Vendor
- CVE Published:
- 11 September 2024
Summary
A local privilege escalation vulnerability exists within the Citrix Workspace app for Windows, which could allow low-privileged users to elevate their privileges to that of a system user. This situation poses a significant risk to system integrity as unauthorized access could lead to potential exploitation of other security weaknesses within the operating environment. Proper patching and system checks are essential to mitigate these risks. Citrix has released guidance for users to address this vulnerability and reinforce security protocols.
Affected Version(s)
Citrix Workspace app for Windows Current Release (CR) < 2405
Citrix Workspace app for Windows Long Term Service Release (LTSR) < 2402 LTSR CU1
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database