CVE-2023-24486

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Jul 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-244877.5Arbitrary file read in Citrix ADC and Citrix GatewayCVE-2023-244886.1Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scriptingCVE-2023-244899.8A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthentCVE-2023-24499.8The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plCVE-2023-244904.3Users with only access to launch VDA applications can launch an unauthorized desktopCVE-2023-244917.8A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acceCVE-2023-244928.8A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely eCVE-2023-244935.7A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An auCVE-2023-244945.4A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning itCVE-2023-244956.5A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. CVE-2023-244964.7Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-CVE-2023-244974.7Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2. A specially-