CVE-2020-8269

Description

An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.369

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix Virtual Apps 1912	Windows
Vulnerabilities CVE-2020-8269,CVE-2020-8270,CVE-2020-8283 are affected in Citrix Virtual Apps 2006	Windows
Improper Privilege Management Vulnerability (CVE-2020-8269)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234