CVE-2021-22907
CVE-2021-22907
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
27 May 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.
Affected products
n/a · Citrix Workspace App for Windows