CVE-2024-42423

7.1 highEPSS 0.2%

High (7.1) in citrix workspace. EPSS 0.2% chance of exploitation in the next 30 days.

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2024-09-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

citrix:workspace

References

https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities

Check your stack JSON