Skip to content
OpenAdvisories
Unscored CVE-2021-22928 EUVD-2021-10057GHSA-469p-6wj5-vcqr

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has ei…

Published Aug 5, 2021 · Updated Aug 3, 2024 · Assigned by hackerone

Description

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

Affected products

VendorProductAffectedFixed
— Citrix Virtual Apps and Desktops 2106 HF1, 1912LTSR CU3 HF1, 7.15LTSR CU7 HF1 —

References