Citrix Releases Security Updates for Multiple Products

🗓️ 09 Jul 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 21 Views

Citrix issued security updates for vulnerabilities in multiple products to prevent system control.

Reporter	Title	Published	Views	Family All 107
BDU FSTEC	The vulnerability of the NetScaler Console delivery management service (previously known as NetScaler ADM), the NetScaler SDX (SVM) virtual machine deployment and management platform, and the NetScaler Agent, arises from allowing operations to occur outside of the buffer in memory. This allows an attacker to trigger a service failure.	22 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the NetScaler Console delivery management service (formerly NetScaler ADM), related to authentication procedures that allow attackers to disclose protected information.	22 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Citrix Workspace App for HTML5 lies in the redirection of URLs to unreliable websites, allowing a hacker to redirect users to arbitrary URL addresses.	21 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops (CVAD) virtualization and delivery software (formerly XenApp and XenDesktop) allows a malicious individual to escalate their privileges.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Citrix Workspace App for HTML5, related to incorrect default permissions, allows a perpetrator to bypass the configuration parameters of the GACS (Global App Configuration service).	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Citrix Workspace App for Windows lies in its insecure handling of privileges, allowing an attacker to elevate their privileges to the SYSTEM level.	26 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-5491	10 Jul 202421:49	–	circl
Circl	CVE-2024-5492	10 Jul 202421:49	–	circl
Circl	CVE-2024-6148	10 Jul 202423:54	–	circl
Circl	CVE-2024-6149	10 Jul 202423:54	–	circl

Source	Link
support	www.support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492
support	www.support.citrix.com/article/CTX677998/netscaler-console-agent-and-svm-security-bulletin-for-cve20246235-and-cve20246236
support	www.support.citrix.com/article/CTX678037/citrix-workspace-app-for-html5-security-bulletin-cve20246148-and-cve20246149
support	www.support.citrix.com/article/CTX678025/citrix-provisioning-security-bulletin-cve20246150
support	www.support.citrix.com/article/CTX678035/windows-virtual-delivery-agent-for-cvad-and-citrix-daas-security-bulletin-cve20246151
support	www.support.citrix.com/article/CTX678036/citrix-workspace-app-for-windows-security-bulletin-cve20246286

09 Jul 2024 12:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.8

CVSS 49.4

EPSS0.21331

SSVC

citrix security updates vulnerabilities addressed system control prevention multiple products affected.