Lucene search

K
cve[email protected]CVE-2023-24484
HistoryFeb 16, 2023 - 6:15 p.m.

CVE-2023-24484

2023-02-1618:15:11
CWE-284
web.nvd.nist.gov
84
cve-2023-24484
log files
unauthorized access
directory
nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

Affected configurations

NVD
Node
citrixworkspaceRange<2212-windows
OR
citrixworkspaceMatch1912-ltsrwindows
OR
citrixworkspaceMatch1912cu1ltsrwindows
OR
citrixworkspaceMatch1912cu1-hf1ltsrwindows
OR
citrixworkspaceMatch1912cu2ltsrwindows
OR
citrixworkspaceMatch1912cu3ltsrwindows
OR
citrixworkspaceMatch1912cu4ltsrwindows
OR
citrixworkspaceMatch1912cu5ltsrwindows
OR
citrixworkspaceMatch1912cu6ltsrwindows
OR
citrixworkspaceMatch2203.1-ltsrwindows
OR
citrixworkspaceMatch2203.1cu1ltsrwindows

CNA Affected

[
  {
    "vendor": "Citrix",
    "product": "Citrix Workspace App for Windows",
    "versions": [
      {
        "version": "Citrix Workspace App versions",
        "status": "affected",
        "lessThan": "2212",
        "versionType": "custom",
        "changes": [
          {
            "at": "2203 LTSR before CU2 ",
            "status": "unaffected"
          },
          {
            "at": "1912 LTSR before CU7 Hotfix 2 (19.12.7002) ",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%