CVE-2023-24485

Summary

CVE	CVE-2023-24485
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-02-16 18:15:00 UTC
Updated	2023-02-24 18:32:00 UTC
Description	Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

Risk And Classification

Problem Types: CWE-863

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Citrix	Workspace	All	All	All	All
Application	Citrix	Workspace	1912	-	All	All
Application	Citrix	Workspace	1912	cu1	All	All
Application	Citrix	Workspace	1912	cu1-hf1	All	All
Application	Citrix	Workspace	1912	cu2	All	All
Application	Citrix	Workspace	1912	cu3	All	All
Application	Citrix	Workspace	1912	cu4	All	All
Application	Citrix	Workspace	1912	cu5	All	All
Application	Citrix	Workspace	1912	cu6	All	All
Application	Citrix	Workspace	2203.1	-	All	All
Application	Citrix	Workspace	2203.1	cu1	All	All

References

Reference	Source	Link	Tags
Citrix Workspace app for Windows Security Bulletin for CVE-2023-24484 & CVE-2023-24485	MISC	support.citrix.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

377989 Citrix Workspace App Multiple Vulnerabilities (CTX477617)