← Back

CVE-2024-42423

nvd nist
Published: Sep 10, 2024Modified: Sep 20, 2024

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

Affected (1)

Products: Citrix: Workspace
Citrix
1 product
Workspace
Configuration A
1 platform
Running on/withPlatform Versions
Dell
Thinos
Version 2402
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Workspace
Version 23.9.0.24.4
Running on/withPlatform Versions
Dell
Thinos
Version 2311

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.