CVE-2021-22928: High severity Citrix Virtual Apps and Desktops vulnerability
A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-22928?
CVE-2021-22928 is a vulnerability identified in Citrix Virtual Apps and Desktops that allows a user to escalate their privilege level on a Windows VDA to SYSTEM.
Which software versions are affected by CVE-2021-22928?
CVE-2021-22928 affects Citrix Virtual Apps and Desktops versions 2006 and 2106, as well as Citrix Virtual Apps and Desktops 1912, 1912-cu3, Citrix XenApp 7.15, Citrix XenApp 7.15-cu6, and Citrix XenApp 7.15-cu7, Citrix XenDesktop 7.15, Citrix XenDesktop 7.15-cu6, and Citrix XenDesktop 7.15-cu7.
What is the severity of CVE-2021-22928?
CVE-2021-22928 has a severity rating of 7.8 (High).
How can I fix CVE-2021-22928?
To fix CVE-2021-22928, apply the necessary security updates provided by Citrix in their advisory and ensure that Citrix Profile Management or Citrix Profile Management WMI Plugin are updated to the latest versions.
Where can I find more information about CVE-2021-22928?
For more information about CVE-2021-22928, you can refer to the official advisory from Citrix: https://support.citrix.com/article/CTX319750