CVE-2023-24490: Users with only access to launch VDA applications can launch an unauthorized desktop
Published Jul 10, 2023
·Updated
Users with only access to launch VDA applications can launch an unauthorized desktop
Affected Software
22 affected components
Citrix Virtual Apps and Desktops=1912
Citrix Virtual Apps and Desktops=2203
Citrix Virtual Apps and Desktops=1912-cu1
Citrix Virtual Apps and Desktops=1912-cu2
Citrix Virtual Apps and Desktops=1912-cu3
Citrix Virtual Apps and Desktops=1912-cu4
Citrix Virtual Apps and Desktops=1912-cu5
Citrix Virtual Apps and Desktops=2203-cu1
Citrix Linux Virtual Delivery Agent=2203
Citrix Linux Virtual Delivery Agent=2203-cu1
Citrix Linux Virtual Delivery Agent=2203-cu2
Citrix Linux Virtual Delivery Agent=1912-cu1
Citrix Linux Virtual Delivery Agent=1912-cu2
Citrix Linux Virtual Delivery Agent=1912-cu3
Citrix Linux Virtual Delivery Agent=1912-cu4
Citrix Linux Virtual Delivery Agent=1912-cu5
Citrix Linux Virtual Delivery Agent=1912-cu6
Citrix Linux Virtual Delivery Agent=1912
Citrix Linux Virtual Delivery Agent<2305
Citrix Virtual Apps and Desktops<2305
Citrix Virtual Apps and Desktops=2203-cu2
Citrix Virtual Apps and Desktops=1912-cu6
Event History
Jul 10, 2023
CVE Published
via MITRE·09:06 PM
Data Sourced
via MITRE·09:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-24490?
CVE-2023-24490 is a vulnerability that allows users with only access to launch VDA applications to launch an unauthorized desktop.
2
Which software is affected by CVE-2023-24490?
CVE-2023-24490 affects Citrix Virtual Apps And Desktops versions 1912 and 2203.
3
What is the severity of CVE-2023-24490?
CVE-2023-24490 has a severity level of medium.
4
How can I fix CVE-2023-24490?
To fix CVE-2023-24490, it is recommended to apply the necessary security patches provided by Citrix.
5
Where can I find more information about CVE-2023-24490?
You can find more information about CVE-2023-24490 on the Citrix support website.