CVE-2023-24484

2023-02-1618:15:11

CWE-284

[email protected]

web.nvd.nist.gov

malicious user

log files

unauthorized writing

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

13.2%

JSON

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

Affected configurations

Nvd

Node

citrixworkspaceRange<2212-windows

citrixworkspaceMatch1912-ltsrwindows

citrixworkspaceMatch1912cu1ltsrwindows

citrixworkspaceMatch1912cu1-hf1ltsrwindows

citrixworkspaceMatch1912cu2ltsrwindows

citrixworkspaceMatch1912cu3ltsrwindows

citrixworkspaceMatch1912cu4ltsrwindows

citrixworkspaceMatch1912cu5ltsrwindows

citrixworkspaceMatch1912cu6ltsrwindows

citrixworkspaceMatch2203.1-ltsrwindows

citrixworkspaceMatch2203.1cu1ltsrwindows

VendorProductVersionCPE
citrixworkspace*cpe:2.3:a:citrix:workspace:*:*:*:*:-:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:-:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu1:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu1-hf1:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu2:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu3:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu4:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu5:*:*:ltsr:windows:*:*
citrixworkspace1912cpe:2.3:a:citrix:workspace:1912:cu6:*:*:ltsr:windows:*:*
citrixworkspace2203.1cpe:2.3:a:citrix:workspace:2203.1:-:*:*:ltsr:windows:*:*

Vendor	Product	Version	CPE
citrix	workspace	*	cpe:2.3:a:citrix:workspace:::::-:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:-:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu1:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu1-hf1:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu2:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu3:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu4:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu5:::ltsr:windows::
citrix	workspace	1912	cpe:2.3:a:citrix:workspace:1912:cu6:::ltsr:windows::
citrix	workspace	2203.1	cpe:2.3:a:citrix:workspace:2203.1:-:::ltsr:windows::