Skip to main content

Workspace CVE-2024-7890

MEDIUM
Improper Privilege Management (CWE-269)
2024-09-11 secure@citrix.com
Privilege Escalation Citrix Microsoft Workspace
5.4
CVSS 4.0 · Vendor: citrix
Share

Severity by source

Vendor (citrix) PRIMARY
5.4 MEDIUM
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (citrix) · only source for this CVE.

CVSS VectorVendor: citrix

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
A
Scope
X

Lifecycle Timeline

1
CVE Published
Sep 11, 2024 - 23:15 cve.org
MEDIUM 5.4

DescriptionCVE.org

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

AnalysisAI

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows. Rated medium severity (CVSS 5.4). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Affected products include: Citrix Workspace.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply principle of least privilege, validate privilege transitions, implement proper role separation.

More in Workspace

View all
CVE-2019-11634 CRITICAL
9.8 May 22

Citrix Workspace App before 1904 for Windows has Incorrect Access Control. Rated critical severity (CVSS 9.8), this vuln
CVE-2020-8207 HIGH
8.8 Jul 24

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code exe
CVE-2024-6286 HIGH
8.5 Jul 10

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows. R
CVE-2025-4879 HIGH
7.8 Jun 17

Local privilege escalation vulnerability in Citrix Workspace app for Windows that allows low-privileged users to gain SY
CVE-2023-2257 HIGH
7.8 Apr 24

Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and
CVE-2023-24485 HIGH
7.8 Feb 16

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM o
CVE-2021-22907 HIGH
7.8 May 27

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalat
CVE-2024-42423 HIGH
7.1 Sep 10

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citr
CVE-2024-7889 HIGH
7.0 Sep 11

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows. R
CVE-2023-6588 MEDIUM
6.5 Dec 07

Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Worksp
CVE-2024-2241 MEDIUM
6.3 Mar 07

Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user
CVE-2023-24486 MEDIUM
5.5 Jul 10

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious loca

Same weakness CWE-269 – Improper Privilege Management

View all
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2012-3993 CRITICAL POC
9.3
CVE-2017-11467 CRITICAL POC
9.8
CVE-2014-1510 CRITICAL POC
9.8
CVE-2014-1511 CRITICAL POC
9.8
CVE-2016-0151 HIGH POC
7.8
CVE-2013-0643 HIGH
8.8

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2024-7890 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy