Citrix Alert
2845Warning Date
Severity Level
Warning Number
Target Sector
14 February, 2023
● High
2023-5454
All
Citrix has released security updates to address vulnerabilities in the following products:
* • Citrix Virtual Apps and Desktops versions before 2212
* • Citrix Virtual Apps and Desktops 2203 LTSR before CU2
* • Citrix Virtual Apps and Desktops 1912 LTSR before CU6
* • Citrix Workspace App versions before 2212
* • Citrix Workspace App 2203 LTSR before CU2
* • Citrix Workspace App 1912 LTSR before CU7 Hotfix 2 (19.12.7002)
* • Citrix Workspace app for Linux before 2302
Remote attacker could exploit this vulnerability by doing the following:
• Privilege Escalation
• Improper Access Control
• Session takeover
The CERT team encourages users to review Citrix security advisory and apply the necessary updates: