Citrix VDA und Workspace App für Windows / Local Privilege Escalation

[testperson 1.859]

Hi,

 

Citrix hat für die Virtual Apps & Desktops / DaaS noch folgenden CTX Artikel veröffentlicht: Windows Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2024-6151

 

Zitat

CVE-2024-6151
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Local access to the target system
CWE-269: Improper Privilege Management    
CVSS v4.0 Base Score: 8.5

 

Betroffen:

 

Current Release (CR)

• Citrix Virtual Apps and Desktops versions before 2402 

Long Term Service Release (LTSR)

• Citrix Virtual Apps and Desktops 1912 LTSR before CU9
• Citrix Virtual Apps and Desktops 2203 LTSR before CU5

 

Für die Workspace App: Citrix Workspace app for Windows Security Bulletin CVE-2024-6286

 

Zitat

CVE-2024-6286

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local access to the target system

CWE-269: Improper Privilege Management    
CVSS v4.0 Base Score: 8.5

 

Betroffen:

 

Current Release (CR)

• Citrix Workspace app for Windows versions before 2403.1 

Long Term Service Release (LTSR)

• Citrix Workspace app for Windows versions before 2402 LTSR

 

HTH

Jan