Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-11634 Details

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-11634	CISA-ADP	US Government Resource
https://support.citrix.com/article/CTX251986	CVE	Vendor Advisory
https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin	CVE	Vendor Advisory
https://support.citrix.com/article/CTX251986	[email protected]	Vendor Advisory
https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin	[email protected]	Vendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Vulnerability Name	Date Added	Due Date	Required Action
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability	Nov 3, 2021	May 3, 2022	Apply updates per vendor instructions.

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]
CWE-284	Improper Access Control	CISA-ADP

Product	Versions
citrix receiver	4.9 cumulative_update_6
CPE cpe:2.3:a:citrix:receiver:4.9:cumulative_update_6:::windows:::* Remediation No remediation found in references.
citrix workspace	< 1904
CPE cpe:2.3:a:citrix:workspace::::::windows::* Remediation No remediation found in references.

13 change records found show changes