← Back

CVE-2023-24490

nvd nist
Published: Jul 10, 2023Modified: Nov 21, 2024

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Users with only access to launch VDA applications can launch an unauthorized desktop

Affected (22)

Citrix
2 products
Linux Virtual Delivery Agent
Virtual Apps And Desktops
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Citrix
Linux Virtual Delivery Agent
Before 2305
Linux Virtual Delivery Agent
Version 1912
Linux Virtual Delivery Agent
Version 1912 cu1
Linux Virtual Delivery Agent
Version 1912 cu2
Linux Virtual Delivery Agent
Version 1912 cu3
Linux Virtual Delivery Agent
Version 1912 cu4
Linux Virtual Delivery Agent
Version 1912 cu5
Linux Virtual Delivery Agent
Version 1912 cu6
Linux Virtual Delivery Agent
Version 2203
Linux Virtual Delivery Agent
Version 2203 cu1
Linux Virtual Delivery Agent
Version 2203 cu2
Citrix
Virtual Apps And Desktops
Before 2305
Virtual Apps And Desktops
Version 1912
Virtual Apps And Desktops
Version 1912 cu1
Virtual Apps And Desktops
Version 1912 cu2
Virtual Apps And Desktops
Version 1912 cu3
Virtual Apps And Desktops
Version 1912 cu4
Virtual Apps And Desktops
Version 1912 cu5
Virtual Apps And Desktops
Version 1912 cu6
Virtual Apps And Desktops
Version 2203
Virtual Apps And Desktops
Version 2203 cu1
Virtual Apps And Desktops
Version 2203 cu2

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: secure@citrix.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.