Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.

Published

2023-07-11T22:15:09.750

Last Modified

2024-11-21T07:47:58.187

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-269
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	citrix	secure_access_client	< 23.5.1.3	Yes
Operating System	microsoft	windows	-	No

References

https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491 Vendor Advisory ([email protected])
https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)