CVEvulnerability

CVE-2020-8283

8.8 HIGH Published 2020-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-269

Description

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.

Affected configurations

• citrix virtual apps and desktops (<= 2006) • citrix virtual apps and desktops (>= 1903 <= 1912) • citrix xenapp (< 7.6) • citrix xenapp (>= 7.7 < 7.15) • citrix xenapp 7.6 • citrix xenapp 7.15 • citrix xendesktop (< 7.6) • citrix xendesktop (>= 7.7 < 7.15) • citrix xendesktop 7.6 • citrix xendesktop 7.15

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References