← Vulnerability feed

Vulnerability record · CVE-2024-42423 · published 10 September 2024

CVE-2024-42423: Citrix workspace incorrect authorization vulnerability

Citrix · Workspace

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

7.1 CVSS 3.1 High EPSS 0.15% · top 96.3% CWE-863 · Incorrect authorization
7.1CVSS 3.1 base score
0.15%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities Vendor Advisory

Track CVE-2024-42423 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-11634Citrix Workspace App for Windows improper access controlCitrix Workspace App before 1904 for Windows contains an improper access control flaw (CWE-284) that, per the CVSS vector, is remotely reachable with…KEVEPSS 8.0%analysed8.8CVE-2020-8207Citrix workspace improper access control vulnerabilityImproper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic upd…EPSS 2.1%8.5CVE-2024-6286Citrix workspace improper privilege management vulnerabilityLocal Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsEPSS 0.39%7.8CVE-2023-24485Citrix workspace improper access control vulnerabilityVulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix…EPSS 0.22%7.8CVE-2022-21825Citrix workspace improper access control vulnerabilityAn Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacke…EPSS 0.22%7.8CVE-2021-22907Citrix workspace improper access control vulnerabilityAn improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2…EPSS 0.24%7.3CVE-2025-4879Citrix workspace improper privilege management vulnerabilityLocal Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsEPSS 0.13%7.0CVE-2024-7889Citrix workspace vulnerabilityLocal privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for WindowsEPSS 0.25%

Source: NIST National Vulnerability Database (record CVE-2024-42423), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.