9.8

CVE-2019-11634

Warnung
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Receiver Version4.9 Updatecumulative_update_6 SwEditionwindows
Citrix ≫ Workspace SwPlatformwindows Version < 1904

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Schwachstelle

Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 52.84% 0.978
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.