Lucene search

DellCVE-2024-42423

HistorySep 10, 2024 - 3:15 p.m.

CVE-2024-42423

2024-09-1015:15:17

CWE-863

dell

web.nvd.nist.gov

citrix workspace app

dell thinos 2311

incorrect authorization

information disclosure

unauthorized actions

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.2

Confidence

High

EPSS

Percentile

9.6%

JSON

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

Affected configurations

Nvd

Node

citrixworkspaceMatch23.9.0.24.4

AND

dellthinosMatch2402

Node

citrixworkspaceMatch23.9.0.24.4

AND

dellthinosMatch2311

VendorProductVersionCPE
citrixworkspace23.9.0.24.4cpe:2.3:a:citrix:workspace:23.9.0.24.4:*:*:*:*:*:*:*
dellthinos2402cpe:2.3:o:dell:thinos:2402:*:*:*:*:*:*:*
dellthinos2311cpe:2.3:o:dell:thinos:2311:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
citrix	workspace	23.9.0.24.4	cpe:2.3:a:citrix:workspace:23.9.0.24.4:::::::*
dell	thinos	2402	cpe:2.3:o:dell:thinos:2402:::::::*
dell	thinos	2311	cpe:2.3:o:dell:thinos:2311:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Wyse Proprietary OS (Modern ThinOS)",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "ThinOS 2311"
      },
      {
        "status": "affected",
        "version": "ThinOS 2402"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

6.2

Confidence

High

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-42423