CVE-2023-24490
Medium
Description
Users with only access to launch VDA applications can launch an unauthorized desktop
SeverityMedium
CVSS6.3
Exploit probability—
Product
Citrix Virtual Apps And Desktops
PublishedJul 10, 2023
First seenJul 10, 2023
Weakness typeCWE-284Improper access control
How to fix
Update
- citrix virtual_apps_and_desktops2305 or later
- citrix linux_virtual_delivery_agent2305 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citrix virtual_apps_and_desktops | v < 2305, 1912, 2203 | 2305 |
| citrix linux_virtual_delivery_agent | v < 2305, 1912, 2203 | 2305 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.