CVE-2021-22928

2021-08-0520:16:39

hackerone

www.cve.org

citrix

virtual apps

desktops

vulnerability

privilege escalation

windows vda

EPSS

Percentile

12.6%

JSON

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

CNA Affected

[
  {
    "product": "Citrix Virtual Apps and Desktops",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2106 HF1, 1912LTSR CU3 HF1, 7.15LTSR CU7 HF1"
      }
    ]
  }
]

References

support.citrix.com/article/CTX319750

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2021-22928