QwikSec

Security Database

CVE

CWE

Training

CVE-2020-8283

Published: Dec 14, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9.

Vendor	Product	Versions
n/a	Citrix Virtual Apps and Desktops	affected `2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9`

Weaknesses (CWE)

References

https://support.citrix.com/article/CTX285059

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.