CVE-2019-11634

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

Basic Information

CVE State: PUBLISHED
Reserved Date: May 01, 2019
Published Date: May 22, 2019
Last Updated: February 07, 2025
Vendor: Citrix
Product: Workspace App
Description: Citrix Workspace App before 1904 for Windows has Incorrect Access Control.
Tags

CVSS Scores

CVSS v3.1

9.8 - CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2021-11-03 00:00:00 UTC) Source
Used in Malware: Yes (added 2021-11-03 00:00:00 UTC) Source

References

https://support.citrix.com/v1/search?searchQuery=%22%22&lang=en&sort=cr_date_desc&prod=&pver=&ct=Security+Bulletin https://support.citrix.com/article/CTX251986

Known Exploited Vulnerability Information

Source	Added Date
CISA	2021-11-03 00:00:00 UTC

Timeline

CVE ID Reserved

May 01, 2019
CVE Published to Public

May 22, 2019
Exploit Used in Malware

November 03, 2021
Added to KEVIntel

November 03, 2021