A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virtual_apps_and_desktops | Citrix | 2006 (including) | 2106 (including) |
| Virtual_apps_and_desktops | Citrix | 1912 (including) | 1912 (including) |
| Virtual_apps_and_desktops | Citrix | 1912-cu3 (including) | 1912-cu3 (including) |
| Xenapp | Citrix | 7.15 (including) | 7.15 (including) |
| Xenapp | Citrix | 7.15-cu6 (including) | 7.15-cu6 (including) |
| Xenapp | Citrix | 7.15-cu7 (including) | 7.15-cu7 (including) |
| Xendesktop | Citrix | 7.15 (including) | 7.15 (including) |
| Xendesktop | Citrix | 7.15-cu6 (including) | 7.15-cu6 (including) |
| Xendesktop | Citrix | 7.15-cu7 (including) | 7.15-cu7 (including) |