CVE-2023-24491: High severity citrix secure access client vulnerability
A vulnerability has been discovered in the Citrix Secure Access client for Windows
which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-24491?
CVE-2023-24491 is a vulnerability in the Citrix Secure Access client for Windows that allows an attacker with access to a vulnerable client to escalate their privileges.
How can an attacker exploit CVE-2023-24491?
An attacker can exploit CVE-2023-24491 by using a Standard User Account with access to an endpoint with the vulnerable client installed.
What is the severity of CVE-2023-24491?
CVE-2023-24491 has a severity rating of high.
What software is affected by CVE-2023-24491?
The Citrix Secure Access client for Windows versions up to 23.5.1.3 is affected by CVE-2023-24491.
How can I fix CVE-2023-24491?
To fix CVE-2023-24491, update the Citrix Secure Access client for Windows to a version higher than 23.5.1.3.