CVE-2024-42423
CVSS V2 None
CVSS V3 None
Description
Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized actions leading to information disclosure and tampering.
Overview
- CVE ID
- CVE-2024-42423
- Assigner
- dell
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-09-10T14:55:58.906Z
- Last Modified Date
- 2024-09-10T19:09:13.543Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000225289/dsa-2024-229-security-update-for-dell-thinos-vulnerabilities | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-42423 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42423 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-09-11 13:15:59 | Added to TrackCVE |