Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-24490 EUVD-2023-28508GHSA-jg83-rjrf-gwrc

Users with only access to launch VDA applications can launch an unauthorized desktop

Published Jul 10, 2023 · Updated Oct 23, 2024 · Assigned by Citrix

Vendor: Citrix Product: Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Product: Virtual Delivery Agents for Windows for CVAD and Citrix DaaS Security Platform: Linux Platform: Windows Category: Network devices

Description

Users with only access to launch VDA applications can launch an unauthorized desktop

Affected products

VendorProductAffectedFixed
Citrix Virtual Delivery Agents for Windows for CVAD and Citrix DaaS Security Current Release (CR) 0 – < 2305 , Long Term Service Release (LTSR) 0 – < 2203 LTSR CU3, Long Term Service Release (LTSR) 0 – < 1912 LTSR CU7 2305
Citrix Virtual Delivery Agents for Linux for CVAD and Citrix DaaS Security Current Release (CR) 0 – < 2305, Long Term Service Release (LTSR) 0 – < 2203 LTSR CU3, Long Term Service Release (LTSR) 0 – < 1912 LTSR CU7 hotfix 1(19.12.7001) 2305

Advisories 1

References