CVE-2019-11634 — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
CVE-2019-11634: Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Citrix |
| Product | Workspace Application and Receiver for Windows |
| Date added | 2021-11-03 |
| Due date | 2022-05-03 |
| Ransomware campaign use | Known |
Description
Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-11634
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11634
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog