PT-2019-6081 · Citrix · Citrix Workspace App+1

Published 2019-05-13 · Updated 2025-11-06 · CVE-2019-11634

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1904 for Windows Citrix Receiver for Windows (affected versions not specified)

Description The issue is related to incorrect access control in the Citrix Workspace App, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Citrix Workspace App versions prior to 1904 for Windows, update to version 1904 or later to resolve the issue. For Citrix Receiver for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2021-04805

CVE-2019-11634

Affected Products

Citrix Receiver

Citrix Workspace App

References · 11

• https://support.citrix.com/article/CTX251986 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04805 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11634 · Security Note
• https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin · Vendor Advisory
• https://t.me/cveNotify/141949 · Telegram Post
• https://twitter.com/ComputerPunks/status/1756060665574539329 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634 · Note
• https://twitter.com/ComputerPunks/status/1692209562290651405 · Twitter Post
• https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note