CVE-2023-24486CWE-284

Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications

Medium · published July 10, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-07-10T20:36Z
EPSS history
Timeline
  • 10 JUL 20:36Z
    Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications
    cvelistv5