CVE-2023-24484

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:citrix:workspace:::::-:windows::
	cpe:2.3:a:citrix:workspace:1912:-:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu1:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu1-hf1:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu2:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu3:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu4:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu5:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu6:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:2203.1:-:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:2203.1:cu1:::ltsr:windows::

History

No history.

Information

Published : 2023-02-16 18:15

Updated : 2024-02-28 19:51

NVD link : CVE-2023-24484

Mitre link : CVE-2023-24484

CVE.ORG link : CVE-2023-24484

JSON object : View

Products Affected

citrix

workspace

CWE

NVD-CWE-Other CWE-284

Improper Access Control

{"id": "CVE-2023-24484", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2023-02-16T18:15:11.900", "references": [{"url": "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485", "tags": ["Patch", "Vendor Advisory"], "source": "secure@citrix.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}, {"type": "Secondary", "source": "secure@citrix.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A malicious user can cause log files to be written to a directory that they do not have permission to write to."}], "lastModified": "2023-02-24T19:28:17.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*", "vulnerable": true, "matchCriteriaId": "BF677539-1D84-4A05-A8AF-09723A3909D5", "versionEndExcluding": "2212"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:-:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "554F6592-C252-4B1D-ABEF-C4EE7EACF061"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "3C032E97-4C37-4FE9-BD0E-3AC933489A5B"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu1-hf1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "AECFCE88-901F-4025-AF58-BC7A9207CF97"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu2:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "179CEA0E-92D8-41A8-A2E2-B6808A2CAA25"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu3:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "998E9AAF-E239-4861-8377-B62330FAB903"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu4:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "37D106D3-119F-4194-8F16-C3317248A4D8"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu5:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "3078BBCA-DC94-4B7A-8B74-C012DB4A98A9"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu6:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "D826A570-C5C3-4E67-BABE-E1999C2AB60B"}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:-:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "FEB0B74B-89A7-4194-8881-F35FEAE672BE"}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "A1A14B8C-1B61-4682-AABE-4732B65E51BC"}], "operator": "OR"}]}], "sourceIdentifier": "secure@citrix.com"}