CVE-2023-24491 — Citrix / Citrix Secure Access client for Windows

Description (CNA)

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM.

Affected (CNA)

Vendor / product	Versions
Citrix / Citrix Secure Access client for Windows	affected 0 before 23.5.1.3

CWE

CWE-269

References

https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491

ADP enrichment

CVE

No English description supplied.

https://support.citrix.com/article/CTX561480/citrix-secure-access-client-for-windows-security-bulletin-for-cve202324491

CISA-ADP

No English description supplied.

No references supplied.