Citrix app flaws boost hackers’ power in escalating attacks

TLDR:

• Citrix has released security updates to address two critical vulnerabilities, CVE-2024-7889 and CVE-2024-7890, affecting the Citrix Workspace app for Windows.
• These flaws could allow local attackers to gain SYSTEM privileges on compromised machines.

Citrix has released security updates to address two critical vulnerabilities, CVE-2024-7889 and CVE-2024-7890, affecting the Citrix Workspace app for Windows. These vulnerabilities could allow local attackers to gain SYSTEM privileges on compromised machines. CVE-2024-7889 is a local privilege escalation flaw, while CVE-2024-7890 enables a low-privileged local user to escalate to SYSTEM privileges. Both vulnerabilities require local access to the target system to be exploited. Citrix recommends upgrading to patched versions and following security best practices to enhance security.

Guru Baran, the co-founder of Cyber Security News and GBHackers On Security, explains that staying up-to-date on security patches and following recommended security best practices can help establish a robust security baseline for virtualized environments. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also advised users and administrators to review Citrix’s security updates and apply them promptly to mitigate potential risks.