Severity
High
Analysis Summary
A vulnerability has been identified in the automatic update service of Citrix Workspace app for Windows that could result in:
- A remote compromise of the computer running Citrix Workspace app when Windows file sharing (SMB) is enabled.
- A local user escalating their privilege level to that of an administrator on the computer running Citrix Workspace app for Windows.
A remote compromise is only possible when the user has enabled Windows file sharing (SMB) and only when the updater service is running. If authentication is required for SMB then an attacker must be able to authenticate before they could exploit this issue.
Impact
Arbitrary command execution
Affected Vendors
Citrix
Affected Products
- Citrix Workspace app for Windows 1912 LTSR
- Citrix Workspace app for Windows 2002
Remediation
Update to latest version.