vulnerability

Critical Remote Code Execution Vulnerability in Citrix Workspace app for Windows (CVE-2019-11634)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:N/AC:L/Au:N/C:P/I:P/A:P)	05/22/2019	07/03/2024	07/04/2024

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

05/22/2019

Added

07/03/2024

Modified

07/04/2024

Description

A vulnerability has been identified in Citrix Workspace app for Windows (all versions earlier than version 1904) that could result in local drive access preferences not being enforced.
This can allow an attacker to have read/write access to the client's local drives, which could enable code execution on the client device.

Solution

citrix-workspace-app-update-latest

References

CVE-2019-11634
https://attackerkb.com/topics/CVE-2019-11634
URL-https://support.citrix.com/article/CTX251986/cve201911634-citrix-workspace-app-and-receiver-for-windows-security-update

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today