CVE-2020-13884

CVE-2020-13884 affects Citrix Workspace App for Windows prior to version 1912, where insecure permissions and an unquoted path during uninstallation could allow a local user to escalate privileges. The issue targets the uninstall process, enabling privilege elevation. Citrix’s remediation is to u...

CVE-2020-13885

CVE-2020-13885 affects Citrix Workspace App for Windows prior to version 1912. The root cause is insecure permissions granted during uninstall, enabling a local attacker to escalate privileges to administrator. This is documented in multiple sources (Red Hat and CNVD entries) and is also referenc...