CVE-2023-24485

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485	Patch Vendor Advisory
https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:citrix:workspace:::::-:windows::
	cpe:2.3:a:citrix:workspace:1912:-:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu1:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu1-hf1:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu2:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu3:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu4:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu5:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:1912:cu6:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:2203.1:-:::ltsr:windows::
	cpe:2.3:a:citrix:workspace:2203.1:cu1:::ltsr:windows::

History

21 Nov 2024, 07:47

Type	Values Removed	Values Added
References	~~() https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485 - Patch, Vendor Advisory~~	() https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485 - Patch, Vendor Advisory

Information

Published : 2023-02-16 18:15

Updated : 2024-11-21 07:47

NVD link : CVE-2023-24485

Mitre link : CVE-2023-24485

CVE.ORG link : CVE-2023-24485

JSON object : View

Products Affected

citrix

workspace

CWE

CWE-284

Improper Access Control

CWE-863

Incorrect Authorization

{"id": "CVE-2023-24485", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-02-16T18:15:12.133", "references": [{"url": "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485", "tags": ["Patch", "Vendor Advisory"], "source": "secure@citrix.com"}, {"url": "https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secure@citrix.com", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app."}], "lastModified": "2024-11-21T07:47:57.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*", "vulnerable": true, "matchCriteriaId": "BF677539-1D84-4A05-A8AF-09723A3909D5", "versionEndExcluding": "2212"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:-:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "554F6592-C252-4B1D-ABEF-C4EE7EACF061"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "3C032E97-4C37-4FE9-BD0E-3AC933489A5B"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu1-hf1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "AECFCE88-901F-4025-AF58-BC7A9207CF97"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu2:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "179CEA0E-92D8-41A8-A2E2-B6808A2CAA25"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu3:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "998E9AAF-E239-4861-8377-B62330FAB903"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu4:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "37D106D3-119F-4194-8F16-C3317248A4D8"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu5:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "3078BBCA-DC94-4B7A-8B74-C012DB4A98A9"}, {"criteria": "cpe:2.3:a:citrix:workspace:1912:cu6:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "D826A570-C5C3-4E67-BABE-E1999C2AB60B"}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:-:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "FEB0B74B-89A7-4194-8881-F35FEAE672BE"}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:*", "vulnerable": true, "matchCriteriaId": "A1A14B8C-1B61-4682-AABE-4732B65E51BC"}], "operator": "OR"}]}], "sourceIdentifier": "secure@citrix.com"}