CVE-2023-24484

Published: Feb 16, 2023Modified: Mar 18, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

Affected (11)

Products: Citrix: Workspace

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Citrix Workspace	Before 2212
Citrix Workspace	Version 1912
Citrix Workspace	Version 1912 cu1-hf1
Citrix Workspace	Version 1912 cu1
Citrix Workspace	Version 1912 cu2
Citrix Workspace	Version 1912 cu3
Citrix Workspace	Version 1912 cu4
Citrix Workspace	Version 1912 cu5
Citrix Workspace	Version 1912 cu6
Citrix Workspace	Version 2203.1
Citrix Workspace	Version 2203.1 cu1

Related CWEs

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485

Source: secure@citrix.com

PatchVendor Advisory

https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.