5.5

CVE-2023-24484

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

A malicious user can cause log files to be written to a directory that they do not have permission to write to.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Workspace SwEdition - SwPlatform windows Version < 2212
Citrix ≫ Workspace Version 1912 Update - SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu1 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu1-hf1 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu2 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu3 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu4 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu5 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 1912 Update cu6 SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 2203.1 Update - SwEdition ltsr SwPlatform windows
Citrix ≫ Workspace Version 2203.1 Update cu1 SwEdition ltsr SwPlatform windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.168
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485
Patch
Vendor Advisory