CVE-2025-1223 — Uncontrolled Search Path Element in Citrix Secure Access Client FOR MAC

CWE-427 — Uncontrolled Search Path ElementCWE-366 — Race Condition within a Thread7 documents5 sources
Severity
5.8MEDIUMNVD
EPSS
0.1%
top 74.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Citrix Secure Access Client FOR MACCitrix Secure Access Client
Timeline
PublishedFeb 20

Description

An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data↗2025-02-20
▶
GHSA
GHSA-pcg9-hhvc-mjj6: An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac↗2025-02-20
▶
CVE-2025-1223 — Uncontrolled Search Path Element | cvebase