CVE-2023-24490 — Improper Access Control in Citrix Virtual Delivery Agents FOR Linux FOR Cvad AND Citrix Daas Security

CWE-284 — Improper Access Control2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 78.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Citrix Virtual Delivery Agents FOR Linux FOR Cvad AND Citrix Daas SecurityCitrix Virtual Delivery Agents FOR Windows FOR Cvad AND Citrix Daas SecurityCitrix Linux Virtual Delivery Agent+1 more
Timeline
PublishedJul 10
Latest updateJul 11

Description

Users with only access to launch VDA applications can launch an unauthorized desktop

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

🔴Vulnerability Details

1
GHSA
GHSA-jg83-rjrf-gwrc: Users with only access to launch VDA applications can launch an unauthorized desktop↗2023-07-11
▶