CVE-2024-7890

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.3 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CitrixCNA
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
citrixworkspace
𝑥
< 2203.1
citrixworkspace
2203.1:cu1
citrixworkspace
2203.1:cu2
citrixworkspace
2203.1:cu3
citrixworkspace
2203.1:cu4
citrixworkspace
2203.1:cu5
citrixworkspace
2203.1:cu6_hotfix1
citrixworkspace
2203.1:cu6_hotfix2
citrixworkspace
𝑥
< 2405
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US