CVE-2019-11634criticalunder attackransomwareCWE-284

CVE-2019-11634

58Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 9.8epss 8.0%

from disclosure to weapon

Published on NVDMay 22

CISA KEV+896d

exploitation probability

8.0%top 5% of all CVEs

observed exploitation

yesCISA + VulnCheck

Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

Citrix Workspace App versions before 1904 for Windows allow unauthorized users to access resources or perform actions they shouldn't be able to. This is a serious flaw because it can let attackers bypass security controls and gain unauthorized access to sensitive data or systems.

Technical detail

Incorrect access control in Citrix Workspace App (Windows, pre-1904) permits privilege escalation or unauthorized resource access due to inadequate permission validation. The vulnerability can be exploited by local or remote attackers with limited privileges to bypass authentication or authorization mechanisms, potentially compromising confidentiality and integrity of protected resources.

Summary generated and translated by AI from the official description.

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

References

https://support.citrix.com/article/CTX251986 https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634