9.8

CVE-2019-11634

Warnung
Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Receiver Version4.9 Updatecumulative_update_6 SwEditionwindows
Citrix ≫ Workspace SwPlatformwindows Version < 1904

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Schwachstelle

Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.03% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.citrix.com/article/CTX251986
Vendor Advisory
https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634
US Government Resource