Описание
Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2006.1 (исключая)
cpe:2.3:a:citrix:workspace_app:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 19%
0.0006
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276
Связанные уязвимости
github
больше 3 лет назад
Citrix Workspace App before 2006.1 on Windows has Insecure Permissions for %PROGRAMDATA%\Citrix (and an unquoted UninstallString), which allows local users to gain privileges by copying a malicious citrix.exe there.
EPSS
Процентиль: 19%
0.0006
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-276