CVE-2024-6151: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Published Jul 10, 2024
·Updated
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS
Affected Software
16 affected components
Citrix Virtual Delivery Agent
Citrix Virtual Apps and Desktops<=2311
Citrix Virtual Apps and Desktops=1912
Citrix Virtual Apps and Desktops=1912-cu1
Citrix Virtual Apps and Desktops=1912-cu2
Citrix Virtual Apps and Desktops=1912-cu3
Citrix Virtual Apps and Desktops=1912-cu4
Citrix Virtual Apps and Desktops=1912-cu5
Citrix Virtual Apps and Desktops=1912-cu6
Citrix Virtual Apps and Desktops=1912-cu7
Citrix Virtual Apps and Desktops=1912-cu8
Citrix Virtual Apps and Desktops=2203
Citrix Virtual Apps and Desktops=2203-cu1
Citrix Virtual Apps and Desktops=2203-cu2
Citrix Virtual Apps and Desktops=2203-cu3
Citrix Virtual Apps and Desktops=2203-cu4
Event History
Jul 10, 2024
News Published
via The Register·12:59 AM
News Published
via The Register·01:02 AM
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-6151?
CVE-2024-6151 is rated as a high severity vulnerability that allows local privilege escalation.
2
How do I fix CVE-2024-6151?
To fix CVE-2024-6151, apply the latest patches released by Citrix for the Virtual Delivery Agent.
3
Who is affected by CVE-2024-6151?
CVE-2024-6151 affects users of Citrix Virtual Delivery Agent for Windows within Citrix Virtual Apps and Desktops and Citrix DaaS.
4
What type of vulnerability is CVE-2024-6151?
CVE-2024-6151 is classified as a local privilege escalation vulnerability.
5
What can an attacker do with CVE-2024-6151?
An attacker exploiting CVE-2024-6151 can gain SYSTEM privileges from a low-privileged user account.