CVE-2024-7889 - Vulnerability Details

Vendors	Products
Citrix	Workspace Workspace App

Link	Providers
https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US

Type	Values Removed	Values Added
First Time appeared		Citrix workspace
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:a:citrix:workspace:::::-:windows:: cpe:2.3:a:citrix:workspace:::::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu1:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu2:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu3:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu4:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu5:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix1:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix2:::ltsr:windows:: cpe:2.3:a:citrix:workspace:2402:-:::ltsr:windows::
Vendors & Products		Citrix workspace
Metrics		cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}`

Type	Values Removed	Values Added
First Time appeared		Citrix Citrix workspace App
Weaknesses		CWE-664
CPEs		cpe:2.3:a:citrix:workspace_app::::::windows::* cpe:2.3:a:citrix:workspace_app:::::ltsr:windows::
Vendors & Products		Citrix Citrix workspace App
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
Title		Local privilege escalation allows a low-privileged user to gain SYSTEM privileges
References		https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US
Metrics		cvssV4_0 `{'score': 7, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7889", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "state": "PUBLISHED", "assignerShortName": "Citrix", "dateReserved": "2024-08-16T16:50:35.785Z", "datePublished": "2024-09-11T22:16:41.209Z", "dateUpdated": "2024-09-13T17:29:12.344Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Citrix Workspace app for Windows", "vendor": "Citrix", "versions": [{"lessThan": "2405", "status": "affected", "version": "Current Release (CR)", "versionType": "patch"}, {"lessThan": "2402 LTSR CU1", "status": "affected", "version": "Long Term Service Release (LTSR)", "versionType": "patch"}]}], "datePublic": "2024-09-10T22:12:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Local privilege escalation allows a low-privileged user to gain SYSTEM privileges</span>&nbsp;in&nbsp;Citrix Workspace app for Windows"}], "value": "Local privilege escalation allows a low-privileged user to gain SYSTEM privileges\u00a0in\u00a0Citrix Workspace app for Windows"}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 7, "baseSeverity": "HIGH", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2024-09-11T22:16:41.209Z"}, "references": [{"url": "https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US"}], "source": {"discovery": "UNKNOWN"}, "title": "Local privilege escalation allows a low-privileged user to gain SYSTEM privileges", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-664", "lang": "en", "description": "CWE-664 Improper Control of a Resource Through its Lifetime"}]}], "affected": [{"vendor": "citrix", "product": "workspace_app", "cpes": ["cpe:2.3:a:citrix:workspace_app:*:*:*:*:*:windows:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "2405", "versionType": "custom"}]}, {"vendor": "citrix", "product": "workspace_app", "cpes": ["cpe:2.3:a:citrix:workspace_app:*:*:*:*:ltsr:windows:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "2402_cu1", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-12T03:55:27.338267Z", "id": "CVE-2024-7889", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-13T17:29:12.344Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-7889 (string)

assignerOrgId : e437aed5-38e0-4fa3-a98b-cb73e7acaec6 (string)

state : PUBLISHED (string)

assignerShortName : Citrix (string)

dateReserved : 2024-08-16T16:50:35.785Z (string)

datePublished : 2024-09-11T22:16:41.209Z (string)

dateUpdated : 2024-09-13T17:29:12.344Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Citrix Workspace app for Windows (string)

vendor : Citrix (string)

versions : [ »

0 : { »

lessThan : 2405 (string)

status : affected (string)

version : Current Release (CR) (string)

versionType : patch (string)

}

1 : { »

lessThan : 2402 LTSR CU1 (string)

status : affected (string)

version : Long Term Service Release (LTSR) (string)

versionType : patch (string)

}

]

}

]

datePublic : 2024-09-10T22:12:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : <span style="background-color: rgb(255, 255, 255);">Local privilege escalation allows a low-privileged user to gain SYSTEM privileges</span> in Citrix Workspace app for Windows (string)

}

]

value : Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows (string)

}

]

metrics : [ »

0 : { »

cvssV4_0 : { »

Automatable : NOT_DEFINED (string)

Recovery : NOT_DEFINED (string)

Safety : NOT_DEFINED (string)

attackComplexity : LOW (string)

attackRequirements : NONE (string)

attackVector : LOCAL (string)

baseScore : 7 (number)

baseSeverity : HIGH (string)

privilegesRequired : LOW (string)

providerUrgency : NOT_DEFINED (string)

subAvailabilityImpact : NONE (string)

subConfidentialityImpact : NONE (string)

subIntegrityImpact : NONE (string)

userInteraction : ACTIVE (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (string)

version : 4.0 (string)

vulnAvailabilityImpact : HIGH (string)

vulnConfidentialityImpact : HIGH (string)

vulnIntegrityImpact : HIGH (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

providerMetadata : { »

orgId : e437aed5-38e0-4fa3-a98b-cb73e7acaec6 (string)

shortName : Citrix (string)

dateUpdated : 2024-09-11T22:16:41.209Z (string)

}

references : [ »

0 : { »

url : https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-664 (string)

lang : en (string)

description : CWE-664 Improper Control of a Resource Through its Lifetime (string)

}

]

}

]

affected : [ »

0 : { »

vendor : citrix (string)

product : workspace_app (string)

cpes : [ »

0 : cpe:2.3:a:citrix:workspace_app:*:*:*:*:*:windows:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 2405 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : citrix (string)

product : workspace_app (string)

cpes : [ »

0 : cpe:2.3:a:citrix:workspace_app:*:*:*:*:ltsr:windows:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 2402_cu1 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-12T03:55:27.338267Z (string)

id : CVE-2024-7889 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-13T17:29:12.344Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7889", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-12T03:55:27.338267Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:citrix:workspace_app:*:*:*:*:*:windows:*:*"], "vendor": "citrix", "product": "workspace_app", "versions": [{"status": "affected", "version": "0", "lessThan": "2405", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:citrix:workspace_app:*:*:*:*:ltsr:windows:*:*"], "vendor": "citrix", "product": "workspace_app", "versions": [{"status": "affected", "version": "0", "lessThan": "2402_cu1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-664", "description": "CWE-664 Improper Control of a Resource Through its Lifetime"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-13T17:22:22.933Z"}}], "cna": {"title": "Local privilege escalation allows a low-privileged user to gain SYSTEM privileges", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Citrix", "product": "Citrix Workspace app for Windows", "versions": [{"status": "affected", "version": "Current Release (CR)", "lessThan": "2405", "versionType": "patch"}, {"status": "affected", "version": "Long Term Service Release (LTSR)", "lessThan": "2402 LTSR CU1", "versionType": "patch"}], "defaultStatus": "unaffected"}], "datePublic": "2024-09-10T22:12:00.000Z", "references": [{"url": "https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Local privilege escalation allows a low-privileged user to gain SYSTEM privileges\u00a0in\u00a0Citrix Workspace app for Windows", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Local privilege escalation allows a low-privileged user to gain SYSTEM privileges</span>&nbsp;in&nbsp;Citrix Workspace app for Windows", "base64": false}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2024-09-11T22:16:41.209Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7889", "state": "PUBLISHED", "dateUpdated": "2024-09-13T17:29:12.344Z", "dateReserved": "2024-08-16T16:50:35.785Z", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "datePublished": "2024-09-11T22:16:41.209Z", "assignerShortName": "Citrix"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-7889 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-12T03:55:27.338267Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:citrix:workspace_app:*:*:*:*:*:windows:*:* (string)

]

vendor : citrix (string)

product : workspace_app (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 2405 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:citrix:workspace_app:*:*:*:*:ltsr:windows:*:* (string)

]

vendor : citrix (string)

product : workspace_app (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 2402_cu1 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-664 (string)

description : CWE-664 Improper Control of a Resource Through its Lifetime (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-13T17:22:22.933Z (string)

}

]

cna : { »

title : Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (string)

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV4_0 : { »

Safety : NOT_DEFINED (string)

version : 4.0 (string)

Recovery : NOT_DEFINED (string)

baseScore : 7 (number)

Automatable : NOT_DEFINED (string)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N (string)

providerUrgency : NOT_DEFINED (string)

userInteraction : ACTIVE (string)

attackComplexity : LOW (string)

attackRequirements : NONE (string)

privilegesRequired : LOW (string)

subIntegrityImpact : NONE (string)

vulnIntegrityImpact : HIGH (string)

subAvailabilityImpact : NONE (string)

vulnAvailabilityImpact : HIGH (string)

subConfidentialityImpact : NONE (string)

vulnConfidentialityImpact : HIGH (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Citrix (string)

product : Citrix Workspace app for Windows (string)

versions : [ »

0 : { »

status : affected (string)

version : Current Release (CR) (string)

lessThan : 2405 (string)

versionType : patch (string)

}

1 : { »

status : affected (string)

version : Long Term Service Release (LTSR) (string)

lessThan : 2402 LTSR CU1 (string)

versionType : patch (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2024-09-10T22:12:00.000Z (string)

references : [ »

0 : { »

url : https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : <span style="background-color: rgb(255, 255, 255);">Local privilege escalation allows a low-privileged user to gain SYSTEM privileges</span> in Citrix Workspace app for Windows (string)

base64 : false (boolean)

}

]

}

]

providerMetadata : { »

orgId : e437aed5-38e0-4fa3-a98b-cb73e7acaec6 (string)

shortName : Citrix (string)

dateUpdated : 2024-09-11T22:16:41.209Z (string)

}

cveMetadata : { »

cveId : CVE-2024-7889 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-13T17:29:12.344Z (string)

dateReserved : 2024-08-16T16:50:35.785Z (string)

assignerOrgId : e437aed5-38e0-4fa3-a98b-cb73e7acaec6 (string)

datePublished : 2024-09-11T22:16:41.209Z (string)

assignerShortName : Citrix (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:*", "matchCriteriaId": "9F223A0E-ACB8-4448-9F53-BEAC3420D3CF", "versionEndExcluding": "2203.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:*", "matchCriteriaId": "A1A14B8C-1B61-4682-AABE-4732B65E51BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu2:*:*:ltsr:windows:*:*", "matchCriteriaId": "B7B2DFE4-4965-46F8-A8E6-28E88EE1E8A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu3:*:*:ltsr:windows:*:*", "matchCriteriaId": "8C9D0ACE-55C4-4AB3-AC48-91AF823A8D8B", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu4:*:*:ltsr:windows:*:*", "matchCriteriaId": "0F12A663-578A-43D8-B141-31EC36BC72C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu5:*:*:ltsr:windows:*:*", "matchCriteriaId": "9AC216C0-F7A6-4B71-8F3E-76C6ACC71F60", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix1:*:*:ltsr:windows:*:*", "matchCriteriaId": "D7906C9C-9414-42D0-84EF-6447C4E5980F", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix2:*:*:ltsr:windows:*:*", "matchCriteriaId": "2C6ABB6B-C406-42EC-B46A-E6FF478D7607", "vulnerable": true}, {"criteria": "cpe:2.3:a:citrix:workspace:2402:-:*:*:ltsr:windows:*:*", "matchCriteriaId": "54058497-4D16-4C1F-8A75-D4C5F8B11FCD", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*", "matchCriteriaId": "E588BF02-9C6F-4D41-8AF4-2DFFB2B06CA4", "versionEndExcluding": "2405", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Local privilege escalation allows a low-privileged user to gain SYSTEM privileges\u00a0in\u00a0Citrix Workspace app for Windows"}, {"lang": "es", "value": "La escalada de privilegios locales permite que un usuario con pocos privilegios obtenga permisos de SYSTEM en la aplicaci\u00f3n Citrix Workspace para Windows"}], "id": "CVE-2024-7889", "lastModified": "2024-10-22T14:50:55.187", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "HIGH", "vulnerableSystemConfidentiality": "HIGH", "vulnerableSystemIntegrity": "HIGH"}, "source": "secure@citrix.com", "type": "Secondary"}]}, "published": "2024-09-11T23:15:10.023", "references": [{"source": "secure@citrix.com", "tags": ["Vendor Advisory"], "url": "https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US"}], "sourceIdentifier": "secure@citrix.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-664"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:citrix:workspace:*:*:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 9F223A0E-ACB8-4448-9F53-BEAC3420D3CF (string)

versionEndExcluding : 2203.1 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu1:*:*:ltsr:windows:*:* (string)

matchCriteriaId : A1A14B8C-1B61-4682-AABE-4732B65E51BC (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu2:*:*:ltsr:windows:*:* (string)

matchCriteriaId : B7B2DFE4-4965-46F8-A8E6-28E88EE1E8A8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu3:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 8C9D0ACE-55C4-4AB3-AC48-91AF823A8D8B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu4:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 0F12A663-578A-43D8-B141-31EC36BC72C4 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu5:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 9AC216C0-F7A6-4B71-8F3E-76C6ACC71F60 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix1:*:*:ltsr:windows:*:* (string)

matchCriteriaId : D7906C9C-9414-42D0-84EF-6447C4E5980F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:citrix:workspace:2203.1:cu6_hotfix2:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 2C6ABB6B-C406-42EC-B46A-E6FF478D7607 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:citrix:workspace:2402:-:*:*:ltsr:windows:*:* (string)

matchCriteriaId : 54058497-4D16-4C1F-8A75-D4C5F8B11FCD (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:* (string)

matchCriteriaId : E588BF02-9C6F-4D41-8AF4-2DFFB2B06CA4 (string)

versionEndExcluding : 2405 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows (string)

}

1 : { »

lang : es (string)

value : La escalada de privilegios locales permite que un usuario con pocos privilegios obtenga permisos de SYSTEM en la aplicación Citrix Workspace para Windows (string)

}

]

id : CVE-2024-7889 (string)

lastModified : 2024-10-22T14:50:55.187 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.3 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.3 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

cvssMetricV40 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackRequirements : NONE (string)

attackVector : LOCAL (string)

automatable : NOT_DEFINED (string)

availabilityRequirements : NOT_DEFINED (string)

baseScore : 7 (number)

baseSeverity : HIGH (string)

confidentialityRequirements : NOT_DEFINED (string)

exploitMaturity : NOT_DEFINED (string)

integrityRequirements : NOT_DEFINED (string)

modifiedAttackComplexity : NOT_DEFINED (string)

modifiedAttackRequirements : NOT_DEFINED (string)

modifiedAttackVector : NOT_DEFINED (string)

modifiedPrivilegesRequired : NOT_DEFINED (string)

modifiedSubsequentSystemAvailability : NOT_DEFINED (string)

modifiedSubsequentSystemConfidentiality : NOT_DEFINED (string)

modifiedSubsequentSystemIntegrity : NOT_DEFINED (string)

modifiedUserInteraction : NOT_DEFINED (string)

modifiedVulnerableSystemAvailability : NOT_DEFINED (string)

modifiedVulnerableSystemConfidentiality : NOT_DEFINED (string)

modifiedVulnerableSystemIntegrity : NOT_DEFINED (string)

privilegesRequired : LOW (string)

providerUrgency : NOT_DEFINED (string)

recovery : NOT_DEFINED (string)

safety : NOT_DEFINED (string)

subsequentSystemAvailability : NONE (string)

subsequentSystemConfidentiality : NONE (string)

subsequentSystemIntegrity : NONE (string)

userInteraction : ACTIVE (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (string)

version : 4.0 (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

vulnerableSystemAvailability : HIGH (string)

vulnerableSystemConfidentiality : HIGH (string)

vulnerableSystemIntegrity : HIGH (string)

}

source : secure@citrix.com (string)

type : Secondary (string)

}

]

}

published : 2024-09-11T23:15:10.023 (string)

references : [ »

0 : { »

source : secure@citrix.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.citrix.com/s/article/CTX691485-citrix-workspace-app-for-windows-security-bulletin-cve20247889-and-cve20247890?language=en_US (string)

}

]

sourceIdentifier : secure@citrix.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-664 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object