Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24451 State: PUBLISHED Published: 2023-01-24T00:00:00 Last Updated: 2024-08-02T10:56:04.145Z Vendors: Jenkins Project Products: Jenkins Cisco Spark Notifier Plugin Description: A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803
CVE ID: CVE-2023-24452 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:46:59.699Z Vendors: Jenkins Project Products: Jenkins TestQuality Updater Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800
CVE ID: CVE-2023-24453 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:39:54.424Z Vendors: Jenkins Project Products: Jenkins TestQuality Updater Plugin Description: A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800
CVE ID: CVE-2023-24454 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:46:14.936Z Vendors: Jenkins Project Products: Jenkins TestQuality Updater Plugin Description: Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2091
CVE ID: CVE-2023-24455 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:45:26.761Z Vendors: Jenkins Project Products: Jenkins visualexpert Plugin Description: Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2709
CVE ID: CVE-2023-24456 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:44:28.020Z Vendors: Jenkins Project Products: Jenkins Keycloak Authentication Plugin Description: Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2987
CVE ID: CVE-2023-24457 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:38:38.774Z Vendors: Jenkins Project Products: Jenkins Keycloak Authentication Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2986
CVE ID: CVE-2023-24458 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-02T13:37:38.461Z Vendors: Jenkins Project Products: Jenkins BearyChat Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745
CVE ID: CVE-2023-24459 State: PUBLISHED Published: 2023-01-24T00:00:00.000Z Last Updated: 2025-04-01T16:07:06.060Z Vendors: Jenkins Project Products: Jenkins BearyChat Plugin Description: A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2745
CVE ID: CVE-2023-24460 State: PUBLISHED Published: 2024-05-16T20:47:44.292Z Last Updated: 2024-08-02T10:56:04.160Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) GPA software installers Problem Types: escalation of privilege, CWE-276 Description: Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE ID: CVE-2023-24461 State: PUBLISHED Published: 2023-05-03T14:31:08.249Z Last Updated: 2025-01-29T21:41:27.510Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Edge Client Problem Types: CWE-295 Description: An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000132539
CVE ID: CVE-2023-24463 State: PUBLISHED Published: 2024-02-14T13:37:45.613Z Last Updated: 2024-08-02T10:56:04.110Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: information disclosure, CWE-20 Description: Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable information disclosure via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-24464 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T17:02:59.839Z Vendors: BUFFALO INC. Products: BS-GS series Problem Types: Stored cross-site scripting Description: Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arbitrary JavaScript on a legitimate user's web browser. The affected products and versions are as follows: BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.
024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.buffalo.jp/news/detail/20230310-01.html - https://jvn.jp/en/vu/JVNVU96824262/
CVE ID: CVE-2023-24465 State: PUBLISHED Published: 2023-03-10T10:45:12.940Z Last Updated: 2025-03-04T21:17:09.449Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-20 Description: Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-03.md
CVE ID: CVE-2023-24466 State: PUBLISHED Published: 2024-11-22T15:34:31.683Z Last Updated: 2024-11-25T18:12:11.291Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText Products: iManager Problem Types: CWE-611 Description: Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf
CVE ID: CVE-2023-24467 State: PUBLISHED Published: 2024-11-22T15:34:29.957Z Last Updated: 2024-11-25T18:12:56.534Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: iManager Problem Types: CWE-77, CWE-78 Description: Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/imanager-32/pdfdoc/imanager326_patch3_releasenotes/imanager326_patch3_releasenotes.pdf
CVE ID: CVE-2023-24468 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:45:24.555Z Vendors: n/a Products: NetIQ Advanced Authentication Problem Types: Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 Description: Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6372/data/advanced-authentication-releasenotes-6372.html - https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentic
uthentication-releasenotes-6372.html - https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-6411/data/advanced-authentication-releasenotes-6411.html
CVE ID: CVE-2023-24469 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-03T18:07:05.993Z Vendors: n/a Products: ArcSight Logger Problem Types: Potential Cross-Site Scripting (CVE-2023-24469) in ArcSight Logger versions prior to 7.3.0 Description: Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.microfocus.com/support/downloads/ - https://www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/ - https://portal.microfocus.com/s/article/KM000018224?language=en_US%2C
CVE ID: CVE-2023-24470 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-06T15:47:28.285Z Vendors: n/a Products: ArcSight Logger Problem Types: Potential XML External Entity Injection (CVE-2023-24470) in ArcSight Logger versions prior to 7.3.0 Description: Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000018224?language=en_US - https://www.microfocus.com/support/downloads/%2C - https://www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/
CVE ID: CVE-2023-24471 State: PUBLISHED Published: 2023-08-09T08:54:27.616Z Last Updated: 2024-08-02T10:56:04.274Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-863 Description: An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normally be not accessible in the Query and Assertions functions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Conta
accessible in the Query and Assertions functions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:5-01
CVE ID: CVE-2023-24472 State: PUBLISHED Published: 2023-03-30T15:47:40.229Z Last Updated: 2025-02-13T16:44:15.585Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-674 Description: A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide malicious input to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1709 -
Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1709 - https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html
CVE ID: CVE-2023-24473 State: PUBLISHED Published: 2023-03-30T15:47:41.052Z Last Updated: 2024-08-02T10:56:04.516Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenImageIO Project Products: OpenImageIO Problem Types: CWE-125 Description: An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerabili
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1707
CVE ID: CVE-2023-24474 State: PUBLISHED Published: 2023-07-13T10:56:01.848Z Last Updated: 2024-11-12T17:04:04.961Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Honeywell Products: Experion Server, Experion Station, Engineering Station, Direct Station Problem Types: CWE-122 Description: Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-24475 State: PUBLISHED Published: 2023-05-10T13:17:07.225Z Last Updated: 2025-01-27T18:02:21.411Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: information disclosure, CWE-125 Description: Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-24476 State: PUBLISHED Published: 2023-06-07T21:44:56.326Z Last Updated: 2025-01-06T19:52:37.584Z Severity: LOW (CVSS 1.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: PTC Products: Vuforia Studio Problem Types: CWE-285 Description: An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13
CVE ID: CVE-2023-24477 State: PUBLISHED Published: 2023-08-09T07:50:56.736Z Last Updated: 2024-09-20T12:13:36.302Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-384 Description: In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session. Additional Analyst Notes: - CVE Program Container: References: - https://security.nozominetworks.com/NN-2023:8-01
CVE ID: CVE-2023-24478 State: PUBLISHED Published: 2023-08-15T12:42:18.308Z Last Updated: 2024-10-01T18:24:41.291Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux Problem Types: information disclosure, CWE-330 Description: Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro Edition for linux before version 22.4 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
rmation disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00850.html
CVE ID: CVE-2023-24479 State: PUBLISHED Published: 2023-10-11T15:14:31.297Z Last Updated: 2024-08-02T10:56:04.167Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Yifan Products: YF325 Problem Types: CWE-284 Description: An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1762
CVE ID: CVE-2023-24480 State: PUBLISHED Published: 2023-07-13T10:57:46.879Z Last Updated: 2025-03-05T18:50:43.950Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Honeywell Products: C300 Problem Types: CWE-116 Description: Controller DoS due to stack overflow when decoding a message from the server. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-24481 State: PUBLISHED Published: 2024-02-14T13:37:42.366Z Last Updated: 2025-05-08T15:23:15.484Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Thunderbolt(TM) DCH drivers for Windows Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
CVE ID: CVE-2023-24482 State: PUBLISHED Published: 2023-02-14T10:36:24.707Z Last Updated: 2025-03-20T16:14:10.708Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: COMOS V10.2, COMOS V10.3.3.1, COMOS V10.3.3.2, COMOS V10.3.3.3, COMOS V10.3.3.4, COMOS V10.4.0.0, COMOS V10.4.1.0, COMOS V10.4.2.0 Problem Types: CWE-120 Description: A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COM
ersions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-693110.pdf
CVE ID: CVE-2023-24483 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T19:15:51.503Z Vendors: Citrix Products: Citrix Virtual Apps and Desktops Problem Types: CWE-269 Description: A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477616/citrix-virtual-apps-and-desktops-security-bulletin-for-cve202324483
CVE ID: CVE-2023-24484 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T19:12:52.294Z Vendors: Citrix Products: Citrix Workspace App for Windows Problem Types: CWE-284 Description: A malicious user can cause log files to be written to a directory that they do not have permission to write to. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485
CVE ID: CVE-2023-24485 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T14:18:32.054Z Vendors: Citrix Products: Citrix Workspace App for Windows Problem Types: CWE-284 Description: Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477617/citrix-workspace-app-for-windows-security-bulletin-for-cve202324484-cve202324485
CVE ID: CVE-2023-24486 State: PUBLISHED Published: 2023-07-10T20:36:01.889Z Last Updated: 2024-10-25T19:30:30.588Z Vendors: Citrix Products: Citrix Workspace app for Linux Problem Types: CWE-284 Description: A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477618/citrix-workspace-app-for-linux-security-bulletin-for-cve202324486
CVE ID: CVE-2023-24487 State: PUBLISHED Published: 2023-07-10T20:51:59.630Z Last Updated: 2024-10-25T19:51:04.955Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Citrix Products: Citrix ADC and Citrix Gateway Problem Types: CWE-253 Description: Arbitrary file read in Citrix ADC and Citrix Gateway Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.citrix.com/article/CTX477714/citrix-adc-and-citrix-gateway-security-bulletin-for-cve202324487-cve202324488