CVE-2024-6286 — Improper Privilege Management in Citrix Workspace APP FOR Windows

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
8.5HIGHNVD
EPSS
0.2%
top 63.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Citrix Workspace APP FOR WindowsCitrix WorkspaceCitrix Workspace APP+1 more
Timeline
PublishedJul 10
Latest updateJul 11

Description

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages4 packages

▶NVDcitrix/workspace< 2203.1+2

🔴Vulnerability Details

1
GHSA
GHSA-qgrq-6c5w-399w: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows↗2024-07-10
▶

📋Vendor Advisories

1
Citrix
Citrix Workspace app for Windows Security Bulletin CVE-2024-6286↗2024-07-11
▶