High WID-SEC-2023-0372 1 CVE

Citrix Systems Virtual Apps and Desktops: Schwachstelle ermöglicht Privilegieneskalation

Published Feb 14, 2023 · Updated Feb 14, 2023 · de-DE

Vendor: Citrix Product: Virtual Apps and Desktops < 1912 LTSR CU6 Product: Virtual Apps and Desktops < 2203 LTSR CU2 Product: Virtual Apps and Desktops < 2212 Product: virtual_apps_and_desktops Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Citrix Systems Virtual Apps and Desktops ausnutzen, um seine Privilegien zu erhöhen.

Product

Citrix Virtual Apps and Desktops ist eine Lösung zur Anwendungsvirtualisierung.

Vulnerabilities 1

High 7.8

CVE-2023-24483

Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.

Citrix Citrix Virtual Apps and Desktops Network devices

Feb 16, 2023

Revision history

2023-02-14 #1
Initiale Fassung

References

Citrix Security Bulletin CTX477616 vom 2023-02-14
https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483