CVE-2020-13885 — Incorrect Default Permissions in Citrix Workspace APP

CWE-276 — Incorrect Default Permissions4 documents3 sources

Severity

7.8HIGHNVD

EPSS

0.2%

top 62.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Citrix Workspace APP Citrix Workspace Citrix Workspace APP +2 more

Timeline

PublishedJun 8

Latest updateMay 24

Description

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶NVDcitrix/workspace_app< 2006.1

▶citrixcitrix/workspace

▶citrixcitrix/citrix_workspace

▶citrixcitrix/citrix_workspace_app

▶citrixcitrix/xenserver

🔴Vulnerability Details

GHSA

GHSA-jgxx-8p2r-rf24: Citrix Workspace App before 2006↗2022-05-24

▶

📋Vendor Advisories

Citrix

Vulnerabilities in Citrix Workspace app and Receiver for Windows↗2020-06-11

▶

Citrix

CVE-2020-13885: Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the appl↗2020-06-08

▶