First published: Fri Jul 24 2020(Updated: )
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Workspace | =1912 | |
Citrix Workspace | =2002 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-8207 is a vulnerability in Citrix Workspace app for Windows 1912 CU1 and 2006.1 that allows privilege escalation and code execution.
CVE-2020-8207 affects Citrix Workspace app for Windows 1912 CU1 and 2006.1 where the automatic updater service is running.
CVE-2020-8207 has a severity rating of 8.8 (high).
To fix CVE-2020-8207, it is recommended to update Citrix Workspace app to a version that is not affected by the vulnerability.
More information about CVE-2020-8207 can be found in the Citrix support article: https://support.citrix.com/article/CTX277662