NetSight
high7.8

CVE-2021-22928

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile …

Impact

A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.

Affected products

VendorProductAffected versions
CitrixVirtual Apps And Desktops
from 2006 through 2106
Version 1912
CitrixXenapp
Version 7.15
CitrixXendesktop
Version 7.15

References