This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Citrix Workspace Windows fixes 2 vulnerabilities
Citrix fixes 2 vulnerabilities in Citrix Workspace Windows. The vulnerabilities are fixed in version 2405 for Citrix Workspace Windows and in version 2402 CU1 for Citrix Workspace Windows LTSR [1].
A local authenticated attacker can elevate their privileges to SYSTEM [1].
The vulnerability is present in products:
- Citrix Workspace Windows; <2405;
- Citrix Workspace LTSR Windows; <2402;
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-7889 at cve.org, NVD
- CWE-664: Improper Control of a Resource Through its Lifetime at cwe.mitre.org
The vulnerability was publicly disclosed 10. 9. 2024.
A local authenticated attacker can elevate their privileges to SYSTEM [1].
The vulnerability is present in products:
- Citrix Workspace Windows; <2405;
- Citrix Workspace LTSR Windows; <2402;
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2024-7890 at cve.org, NVD
- CWE-269: Improper Privilege Management at cwe.mitre.org
The vulnerability was publicly disclosed 10. 9. 2024.
By CESNET, z.s.p.o. Martin Krajči on 20. 9. 2024.