Skip to content
OpenAdvisories
High · 7.8 CVE-2023-24491 EUVD-2023-28509GHSA-cwcp-whhw-8qj7

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access…

Published Jul 11, 2023 · Updated Nov 7, 2024 · Assigned by Citrix

Description

A vulnerability has been discovered in the Citrix Secure Access client for Windows

which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.

Affected products

VendorProductAffectedFixed
Citrix Citrix Secure Access client for Windows < 23.5.1.3 23.5.1.3

References