CVE-2023-24491 — Improper Privilege Management in Citrix Secure Access Client FOR Windows

CWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 75.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Citrix Secure Access Client FOR WindowsCitrix Secure Access Client
Timeline
PublishedJul 11
Latest updateJul 12

Description

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cwcp-whhw-8qj7: A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an en↗2023-07-12
▶
CVEList
CVE-2023-24491: A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an en↗2023-07-11
▶

📋Vendor Advisories

1
Citrix
CVE-2023-24491: A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an↗2023-07-11
▶
CVE-2023-24491 — Improper Privilege Management | cvebase