A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
References
| Link | Resource |
|---|---|
| https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Feb 2023, 19:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483 - Vendor Advisory | |
| CPE | cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:* cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Microsoft windows
Citrix Microsoft Citrix virtual Apps And Desktops |
|
| CWE | CWE-269 |
16 Feb 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-16 18:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-24483
Mitre link : CVE-2023-24483
CVE.ORG link : CVE-2023-24483
JSON object : View
Products Affected
microsoft
- windows
citrix
- virtual_apps_and_desktops
CWE
CWE-269
Improper Privilege Management