CVE-2024-6150

Published: Jul 10, 2024Modified: Jul 25, 2025

4.8

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: secure@citrix.com (Secondary)

Description

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning

Affected (13)

Products: Citrix: Provisioning

Citrix

1 product

Provisioning

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Citrix Provisioning	Up to 2311
Citrix Provisioning	Version 1912 cu1
Citrix Provisioning	Version 1912 cu2
Citrix Provisioning	Version 1912 cu3
Citrix Provisioning	Version 1912 cu4
Citrix Provisioning	Version 1912 cu5
Citrix Provisioning	Version 1912 cu6
Citrix Provisioning	Version 1912 cu7
Citrix Provisioning	Version 1912 cu8
Citrix Provisioning	Version 2203 cu1
Citrix Provisioning	Version 2203 cu2
Citrix Provisioning	Version 2203 cu3
Citrix Provisioning	Version 2203 cu4

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://support.citrix.com/article/CTX678025

Source: secure@citrix.com

Vendor Advisory

https://support.citrix.com/article/CTX678025

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.