Threat Advisory

Citrix Updates Address Critical Vulnerability in Workspace App for Windows

Threat: Vulnerability
Targeted Region: Global
Targeted Sector: Technology & IT
Criticality: High
[subscribe_to_unlock_form]

EXECUTIVE SUMMARY:

Citrix has released security updates to address two critical vulnerabilities in the Citrix Workspace app for Windows, tracked as CVE-2024-7889 and CVE-2024-7890. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level on compromised machines. CVE-2024-7889 involves improper resource control leading to local privilege escalation. Similarly, CVE-2024-7890 enables privilege escalation due to improper privilege management. Both vulnerabilities require local access for exploitation and impact supported versions of the Citrix Workspace app for Windows. It strongly recommends users upgrade to the patched versions of the Workspace app to mitigate these vulnerabilities. Implementing security best practices can further enhance protection against potential threats in virtualized environments.[/subscribe_to_unlock_form]

EXECUTIVE SUMMARY:

Citrix has released security updates to address two critical vulnerabilities in the Citrix Workspace app for Windows, tracked as CVE-2024-7889 and CVE-2024-7890. These vulnerabilities allow local attackers to escalate privileges to SYSTEM level on compromised machines. CVE-2024-7889 involves improper resource control leading to local privilege escalation. Similarly, CVE-2024-7890 enables privilege escalation due to improper privilege management. Both vulnerabilities require local access for exploitation and impact supported versions of the Citrix Workspace app for Windows. It strongly recommends users upgrade to the patched versions of the Workspace app to mitigate these vulnerabilities. Implementing security best practices can further enhance protection against potential threats in virtualized environments.[emaillocker id="1283"]

 

  • CVE-2024-7889: This local privilege escalation flaw can be exploited by attackers with low privileges to manipulate resource controls improperly. By leveraging this vulnerability, an attacker can execute malicious actions that require elevated permissions, potentially compromising system integrity. Users should prioritize upgrading to patched versions to eliminate this risk.

 

  • CVE-2024-7890: This vulnerability enables low-privileged users to escalate their privileges to SYSTEM level through inadequate privilege management. Attackers can exploit this flaw to gain unauthorized access to sensitive system components and data. It is crucial to apply security updates promptly to safeguard against potential exploitation.


RECOMMENDATION:

We strongly recommend you upgrade Citrix Workspace app for windows as below:

  • Citrix Workspace app for Windows 2405 and later versions for Current Release (CR).
  • Citrix Workspace app for Windows 2402 CU1 LTSR and later versions for Long Term Service Release (LTSR).


REFERENCES:
The following reports contain further technical details:

https://cybersecuritynews.com/citrix-workspace-privilege-escalation/

 

[/emaillocker]
crossmenu