CVEvulnerability
CVE-2020-13884
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-276
Description
Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application.
Affected configurations
• citrix workspace app (< 2006.1)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://github.com/hessandrew/CVE-2020-13884 Exploit, Third Party Advisory
- https://support.citrix.com/article/CTX275460 support.citrix.com
- https://github.com/hessandrew/CVE-2020-13884 Exploit, Third Party Advisory
- https://support.citrix.com/article/CTX275460 support.citrix.com