What is the severity of CVE-2024-42423?

CVE-2024-42423 has been classified as a medium severity vulnerability due to its potential impact on system security.

How do I fix CVE-2024-42423?

To remediate CVE-2024-42423, update Citrix Workspace App to version 23.9.0.24.5 or later, and ensure all patches are applied.

Who is affected by CVE-2024-42423?

CVE-2024-42423 affects users operating Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311.

What type of vulnerability is CVE-2024-42423?

CVE-2024-42423 is identified as an Incorrect Authorization vulnerability that allows unauthorized actions by local low-privileged users.

Can CVE-2024-42423 be exploited remotely?

No, CVE-2024-42423 requires local access, as it can only be exploited by unauthenticated users on the affected system.

Vulnerability/
CVE-2024-42423

high

7.1

CWE

863

10/9/2024

20/9/2024

CVE-2024-42423

First published: Tue Sep 10 2024(Updated: )

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

Credit: security_alert@emc.com

Affected Software	Affected Version	How to fix
All of
Citrix Workspace app	=23.9.0.24.4
Dell Wyse ThinOS	=2402
All of
Citrix Workspace app	=23.9.0.24.4
Dell Wyse ThinOS	=2311

Never miss a vulnerability like this again

Reference Links

https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-42423?
CVE-2024-42423 has been classified as a medium severity vulnerability due to its potential impact on system security.
How do I fix CVE-2024-42423?
To remediate CVE-2024-42423, update Citrix Workspace App to version 23.9.0.24.5 or later, and ensure all patches are applied.
Who is affected by CVE-2024-42423?
CVE-2024-42423 affects users operating Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311.
What type of vulnerability is CVE-2024-42423?
CVE-2024-42423 is identified as an Incorrect Authorization vulnerability that allows unauthorized actions by local low-privileged users.
Can CVE-2024-42423 be exploited remotely?
No, CVE-2024-42423 requires local access, as it can only be exploited by unauthenticated users on the affected system.

agent/weakness
agent/references
agent/type
agent/description
agent/first-publish-date
agent/author
agent/event
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/citrix
canonical/citrix workspace app
version/citrix workspace app/23.9.0.24.4
vendor/dell
canonical/dell wyse thinos
version/dell wyse thinos/2402
version/dell wyse thinos/2311

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.