CVE-2024-42423: High severity citrix workspace app vulnerability
Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42423?
CVE-2024-42423 has been classified as a medium severity vulnerability due to its potential impact on system security.
How do I fix CVE-2024-42423?
To remediate CVE-2024-42423, update Citrix Workspace App to version 23.9.0.24.5 or later, and ensure all patches are applied.
Who is affected by CVE-2024-42423?
CVE-2024-42423 affects users operating Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311.
What type of vulnerability is CVE-2024-42423?
CVE-2024-42423 is identified as an Incorrect Authorization vulnerability that allows unauthorized actions by local low-privileged users.
Can CVE-2024-42423 be exploited remotely?
No, CVE-2024-42423 requires local access, as it can only be exploited by unauthenticated users on the affected system.