Citrix Workspace App prior 2006.1 on Windows Privileges citrix.exe default permission
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.3 | $0-$5k | 0.00 |
A vulnerability was found in Citrix Workspace App on Windows (Connectivity Software). It has been declared as critical. This vulnerability affects some unknown processing of the file citrix.exe of the component Privileges. The manipulation with an unknown input leads to a default permission vulnerability. The CWE definition for the vulnerability is CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:
Citrix Workspace App before 2006.1 on Windows has Insecure Permissions for %PROGRAMDATA%\Citrix (and an unquoted UninstallString), which allows local users to gain privileges by copying a malicious citrix.exe there.
The weakness was shared 06/08/2020. This vulnerability was named CVE-2020-13884 since 06/06/2020. Local access is required to approach this attack. Required for exploitation is a single authentication. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1222 by the MITRE ATT&CK project.
Upgrading to version 2006.1 eliminates this vulnerability.
The entry 156275 is related to this item.
Product
Type
Vendor
Name
License
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 6.5VulDB Meta Temp Score: 6.4
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 7.8
NVD Vector: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Default permissionCWE: CWE-276 / CWE-266
ATT&CK: T1222
Local: Yes
Remote: No
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Upgrade: Workspace App 2006.1
Timeline
06/06/2020 🔍06/08/2020 🔍
06/09/2020 🔍
10/22/2020 🔍
Sources
Vendor: citrix.comStatus: Not defined
Confirmation: 🔍
CVE: CVE-2020-13884 (🔍)
See also: 🔍
Entry
Created: 06/09/2020 07:01Updated: 10/22/2020 18:41
Changes: 06/09/2020 07:01 (39), 06/09/2020 07:06 (18), 10/22/2020 18:41 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.