PT-2019-6081 · Citrix · Citrix Workspace App+1

Publicado 2019-05-13 · Atualizado 2025-11-06 · CVE-2019-11634

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1904 for Windows Citrix Receiver for Windows (affected versions not specified)

Description The issue is related to incorrect access control in the Citrix Workspace App, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Citrix Workspace App versions prior to 1904 for Windows, update to version 1904 or later to resolve the issue. For Citrix Receiver for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2021-04805

CVE-2019-11634

Produtos afetados

Citrix Receiver

Citrix Workspace App

Referências · 11

• https://support.citrix.com/article/CTX251986 · Aviso do Fabricante
• https://t.me/cveNotify/141949 · Publicação no Telegram
• https://twitter.com/ComputerPunks/status/1756060665574539329 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2021-04805 · Nota de Segurança
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634 · Nota
• https://osv.dev/vulnerability/CVE-2019-11634 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11634 · Nota de Segurança
• https://twitter.com/ComputerPunks/status/1692209562290651405 · Publicação no Twitter
• https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin · Aviso do Fabricante
• https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin · Nota
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota