CVE-2021-22907: High severity Citrix Workspace Windows vulnerability
Published May 27, 2021
·Updated
An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.
Affected Software
2 affected components
Citrix Workspace Windows<19.12.4000
Citrix Workspace Windows<2105
Event History
May 27, 2021
CVE Published
via MITRE·11:14 AM
Data Sourced
via MITRE·11:14 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-22907?
CVE-2021-22907 is an improper access control vulnerability that exists in Citrix Workspace App for Windows.
2
What software versions are affected by CVE-2021-22907?
CVE-2021-22907 affects Citrix Workspace App for Windows versions prior to 2105 and 1912 LTSR prior to CU4.
3
What is the severity of CVE-2021-22907?
CVE-2021-22907 has a severity rating of 7.8, which is considered high.
4
How can I fix CVE-2021-22907?
To fix CVE-2021-22907, it is recommended to update Citrix Workspace App for Windows to version 2105 or apply CU4 to version 1912 LTSR.
5
Where can I find more information about CVE-2021-22907?
You can find more information about CVE-2021-22907 at the following link: [Citrix Support Article](https://support.citrix.com/article/CTX307794).