Lucene search

K
nvd[email protected]NVD:CVE-2023-24485
HistoryFeb 16, 2023 - 6:15 p.m.

CVE-2023-24485

2023-02-1618:15:12
CWE-863
CWE-284
web.nvd.nist.gov
citrix workspace app
vulnerabilities
windows user
system operations

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

Affected configurations

NVD
Node
citrixworkspaceRange<2212-windows
OR
citrixworkspaceMatch1912-ltsrwindows
OR
citrixworkspaceMatch1912cu1ltsrwindows
OR
citrixworkspaceMatch1912cu1-hf1ltsrwindows
OR
citrixworkspaceMatch1912cu2ltsrwindows
OR
citrixworkspaceMatch1912cu3ltsrwindows
OR
citrixworkspaceMatch1912cu4ltsrwindows
OR
citrixworkspaceMatch1912cu5ltsrwindows
OR
citrixworkspaceMatch1912cu6ltsrwindows
OR
citrixworkspaceMatch2203.1-ltsrwindows
OR
citrixworkspaceMatch2203.1cu1ltsrwindows

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%