Lucene search

HackeroneCVE-2020-8207

HistoryJul 24, 2020 - 10:15 p.m.

CVE-2020-8207

2020-07-2422:15:12

CWE-287

CWE-284

hackerone

web.nvd.nist.gov

124

cve-2020-8207

citrix workspace

windows

privilege escalation

code execution

automatic updater service

access control

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.

Affected configurations

Nvd

Vulners

Node

citrixworkspaceMatch1912ltsrwindows

citrixworkspaceMatch2002windows

VendorProductVersionCPE
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:*:*:*:ltsr:windows:*:*
citrixworkspace2002cpe:2.3:a:citrix:workspace:2002:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912::::ltsr:windows::*
citrix	workspace	2002	cpe:2.3:a:citrix:workspace:2002:::::windows::

CNA Affected

[
  {
    "product": "Citrix Workspace App for Windows",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1912 CU1 and 2006.1"
      }
    ]
  }
]

References

support.citrix.com/article/CTX277662

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

37.8%

JSON

Related for CVE-2020-8207