CVE-2023-24485

Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows

State: Published
Severity: 7.8 High
Published: Feb 16, 2023
Updated: Mar 19, 2025
Reserved: Jan 24, 2023

Description

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Citrix Workspace App for WindowsCitrix	Citrix Workspace App versions to before 2212Affectedfrom 2203 LTSR before CU2 Not affectedfrom 1912 LTSR before CU7 Hotfix 2 (19.12.7002) Not affected

References

https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.