CVE-2023-24485
16.02.2023, 18:15
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| citrix | workspace | 𝑥 < 2212 |
| citrix | workspace | 2203.1 |
| citrix | workspace | 2203.1:cu1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-863 - Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.