The vulnerability of the Citrix Workspace App for Windows lies in its insufficient resource control during its existence. This allows attackers to increase their privileges.

The vulnerability of the Citrix Workspace App for Windows relates to insufficient resource control during its existence. Exploiting this vulnerability can allow attackers to enhance their privileges...

| Citrix Workspace App 24.x SSON fails and ssonsvr.exe not running on client

SSON fails with CWA 2402 and 2405.10 The logon to a session stops at the "other user" screen . It is also noticed that the ssonsvr.exe process is not running on the client...

Vulnerabilities fixed in Citrix Workspace App for Windows

Citrix has fixed vulnerabilities in the Citrix Workspace App for Windows. A local malicious person could exploit the vulnerabilities to grant themselves elevated privileges and potentially execute code with SYSTEM privileges. Citrix has released updates to fix the vulnerabilities. See attached...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX691485)

The version of Citrix Workspace installed on the remote host is prior 2402 LTSR CU1 or 2405. It is, therefore, affected by multiple vulnerabilities: - Local privilege escalation allows a low-privileged user to gain SYSTEM privileges Improper Control of a Resource Through its Lifetime CVE-2024-788...

CVE-2024-7890

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7890

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7890 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7890

CVE-2024-7890 affects Citrix Workspace App for Windows, enabling local privilege escalation for a low-privileged user to gain SYSTEM privileges. The CVE entry notes a local, low-complexity path requiring user interaction, with high impact on confidentiality, integrity and availability. Related ad...

CVE-2024-7890 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-7889

CVE-2024-7889 affects Citrix Workspace App for Windows. It enables local privilege escalation by a low-privileged user to SYSTEM, attributed to improper privilege management/resource lifetime handling. The issue is part of multiple local elevation vulnerabilities in Citrix Workspace App for Windo...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App that originates from a local elevation of privilege that allows a low-privileged...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App that originates from a local elevation of privilege that allows a low-privileged...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...