Low-Privilege Escalation Threat Affects Citrix Workspace for Windows
CVE-2024-7890

7.3HIGH

Key Information:

Vendor
Citrix
Status
Citrix Workspace App For Windows
Vendor
CVE Published:
11 September 2024

Summary

A local privilege escalation vulnerability exists in Citrix Workspace app for Windows, allowing low-privileged users to elevate their privileges to SYSTEM level. This issue could expose sensitive systems and data, offering attackers the ability to execute malicious actions as a privileged user. Organizations using affected versions should take immediate steps to apply security patches and mitigate potential risks associated with this vulnerability.

Affected Version(s)

Citrix Workspace app for Windows Current Release (CR) 0 < 2405

Citrix Workspace app for Windows Long Term Service Release (LTSR) 0 < 2402 LTSR CU1

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.