CVE-2023-24490: Users with only access to launch VDA applications can launch an unauthorized desktop
First published: Mon Jul 10 2023(Updated: )
Users with only access to launch VDA applications can launch an unauthorized desktop
Credit: secure@citrix.com secure@citrix.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Virtual Apps and Desktops | =1912 | |
| Citrix Virtual Apps and Desktops | =2203 | |
| Citrix Virtual Apps and Desktops | =1912-cu1 | |
| Citrix Virtual Apps and Desktops | =1912-cu2 | |
| Citrix Virtual Apps and Desktops | =1912-cu3 | |
| Citrix Virtual Apps and Desktops | =1912-cu4 | |
| Citrix Virtual Apps and Desktops | =1912-cu5 | |
| Citrix Virtual Apps and Desktops | =2203-cu1 | |
| Citrix Linux Virtual Delivery Agent | =2203 | |
| Citrix Linux Virtual Delivery Agent | =2203-cu1 | |
| Citrix Linux Virtual Delivery Agent | =2203-cu2 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu1 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu2 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu3 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu4 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu5 | |
| Citrix Linux Virtual Delivery Agent | =1912-cu6 | |
| Citrix Linux Virtual Delivery Agent | =1912 | |
| Citrix Linux Virtual Delivery Agent | <2305 | |
| Citrix Virtual Apps and Desktops | <2305 | |
| Citrix Virtual Apps and Desktops | =2203-cu2 | |
| Citrix Virtual Apps and Desktops | =1912-cu6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-24490?
CVE-2023-24490 is a vulnerability that allows users with only access to launch VDA applications to launch an unauthorized desktop.
Which software is affected by CVE-2023-24490?
CVE-2023-24490 affects Citrix Virtual Apps And Desktops versions 1912 and 2203.
What is the severity of CVE-2023-24490?
CVE-2023-24490 has a severity level of medium.
How can I fix CVE-2023-24490?
To fix CVE-2023-24490, it is recommended to apply the necessary security patches provided by Citrix.
Where can I find more information about CVE-2023-24490?
You can find more information about CVE-2023-24490 on the Citrix support website.
- collector/nvd-latest
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/type
- agent/author
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/citrix
- canonical/citrix virtual apps and desktops
- version/citrix virtual apps and desktops/1912
- version/citrix virtual apps and desktops/2203
- version/citrix virtual apps and desktops/1912-cu1
- version/citrix virtual apps and desktops/1912-cu2
- version/citrix virtual apps and desktops/1912-cu3
- version/citrix virtual apps and desktops/1912-cu4
- version/citrix virtual apps and desktops/1912-cu5
- version/citrix virtual apps and desktops/2203-cu1
- canonical/citrix linux virtual delivery agent
- version/citrix linux virtual delivery agent/2203
- version/citrix linux virtual delivery agent/2203-cu1
- version/citrix linux virtual delivery agent/2203-cu2
- version/citrix linux virtual delivery agent/1912-cu1
- version/citrix linux virtual delivery agent/1912-cu2
- version/citrix linux virtual delivery agent/1912-cu3
- version/citrix linux virtual delivery agent/1912-cu4
- version/citrix linux virtual delivery agent/1912-cu5
- version/citrix linux virtual delivery agent/1912-cu6
- version/citrix linux virtual delivery agent/1912
- version/citrix virtual apps and desktops/2203-cu2
- version/citrix virtual apps and desktops/1912-cu6