CVE-2024-7890 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889

CVE-2024-7889 affects Citrix Workspace App for Windows. It enables local privilege escalation by a low-privileged user to SYSTEM, attributed to improper privilege management/resource lifetime handling. The issue is part of multiple local elevation vulnerabilities in Citrix Workspace App for Windo...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App that originates from a local elevation of privilege that allows a low-privileged...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App that originates from a local elevation of privilege that allows a low-privileged...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

The CVE-2024-42423 entry concerns Citrix Workspace App 23.9.0.24.4 on Dell ThinOS 2311 with an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local, unauthenticated user with low privileges could bypass controls, potentially leading to information disclosure and ...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

Citrix Releases Security Updates for Citrix Workspace App for Windows

Citrix released security updates to address multiple vulnerabilities in the Citrix Workspace App for Windows. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessar...

PT-2024-38662 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: Local privilege escalation allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version tha...

PT-2024-29938 · Dell +1 · Dell Thinos +1

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 Description: The issue is related to an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potential...

Citrix Workspace App for Windows Privilege Escalation (CTX678036)

The version of Citrix Workspace installed on the remote host is prior to 2203.1 LTSR CU6 Hotfix 2, 2402 LTSR or 2403.1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the CTX678036 advisory. - Local Privilege escalation allows a low-privileged user to gain...

Performance issues with Intel GPUs and Citrix Workspace App

Customers using the Citrix Workspace App with Intel Arc GPUs and Intel GPU driver version 4824 could experience performance issues and lag The performance issues are present in Intel Arc A-series GPUs and Intel Core Ultra with built-in Arc GPUs, for example: Intel Arc A-Series Graphics Intel Arc...

Citrix Workspace App for IOS version 24.8.0 is crashing for users using MicroVPN

Post autoupdate of CWA for IOS 24.8.0, IOS user experiences CWA crash Issue is affecting customers with MicroVPN enabled...

The vulnerability of the Citrix Workspace App for HTML5, related to incorrect default permissions, allows a perpetrator to bypass the configuration parameters of the GACS (Global App Configuration service).

The vulnerability of the Citrix Workspace App for HTML5 is related to incorrect default permissions. Exploiting this vulnerability could allow a malicious actor to bypass the configuration parameters of the GACS Global App Configuration service...

The vulnerability of the Citrix Workspace App for Windows lies in its insecure handling of privileges, allowing an attacker to elevate their privileges to the SYSTEM level.

The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...

The vulnerability of the Citrix Workspace App for HTML5 lies in the redirection of URLs to unreliable websites, allowing a hacker to redirect users to arbitrary URL addresses.

The vulnerability of the Citrix Workspace App for HTML5 relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...

CVE-2024-6148

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

CVE-2024-6148

CVE-2024-6148 affects Citrix Workspace app for HTML5 prior to version 2404.1. The Citrix CTX678037 security bulletin documents two vulnerabilities: (1) bypass of GACS Policy Configuration settings, and (2) redirection of users to a vulnerable URL (CVE-2024-6149). The issue originates in the HTML5...

CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...