Citrix Workspace App Susceptible to Privilege Escalation Assaults

Citrix launched a safety bulletin (CTX691485) detailing two important vulnerabilities within the Citrix Workspace app for Home windows.

These vulnerabilities, recognized as CVE-2024-7889 and CVE-2024-7890, pose vital safety dangers. They permit native privilege escalation that would allow attackers to achieve SYSTEM-level entry.

The severity of those vulnerabilities has been categorized as excessive, prompting pressing consideration from organizations utilizing affected software program variations.

– Commercial –

Affected Variations

The vulnerabilities have an effect on particular variations of the Citrix Workspace app for Home windows. Present Launch (CR) customers ought to notice that variations earlier than 2405 are weak.

Equally, for these utilizing the Lengthy Time period Service Launch (LTSR), variations earlier than 2402 LTSR CU1 are in danger. Customers should confirm their software program model and apply essential updates to mitigate potential threats.

Decoding Compliance: What CISOs Have to Know – Be part of Free Webinar

Desk: Affected Variations

Vulnerability Particulars

CVE-2024-7889

CVE-2024-7889 is a neighborhood privilege escalation vulnerability that permits a low-privileged consumer to achieve SYSTEM privileges on the affected system.

The vulnerability arises from CWE-664, which entails improper useful resource management all through its lifetime.

This flaw has a CVSS v4.0 Base Rating of seven.0, indicating a excessive stage of danger. The assault requires native entry to the goal system, however it might result in vital safety breaches as soon as exploited.

CVE-2024-7890

CVE-2024-7890, one other native privilege escalation vulnerability, additionally permits a low-privileged consumer to achieve SYSTEM privileges.

This situation stems from CWE-269, which pertains to improper privilege administration.

With a CVSS v4.0 Base Rating of 5.4, this vulnerability is barely much less extreme than CVE-2024-7889 however nonetheless poses a considerable risk. Much like the earlier vulnerability, native entry to the system is required for exploitation.

Mitigation and Suggestions

Citrix has acknowledged the severity of those vulnerabilities and is urging customers to replace their Citrix Workspace app for Home windows to the newest variations.

The corporate has offered patches that handle these safety points, and organizations should implement these updates promptly to guard their methods from potential assaults.

The invention of those vulnerabilities within the Citrix Workspace app for Home windows underscores the significance of sustaining strong cybersecurity measures.

Organizations should act swiftly to use the beneficial patches and safeguard their methods towards potential privilege escalation assaults.

By staying knowledgeable and proactive, companies can mitigate dangers and shield their important belongings from cyber threats.

Simulating Cyberattack Eventualities With All-in-One Cybersecurity Platform – Watch Free Webinar