CVE-2023-24484

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

State: Published
Severity: 5.5 Medium
Published: Feb 16, 2023
Updated: Mar 18, 2025
Reserved: Jan 24, 2023

Description

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N	CISA-ADP

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Citrix Workspace App for WindowsCitrix	Citrix Workspace App versions to before 2212Affectedfrom 2203 LTSR before CU2 Not affectedfrom 1912 LTSR before CU7 Hotfix 2 (19.12.7002) Not affected

References

https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.