Pierluigi Paganini July 12, 2023

Citrix fixed a critical flaw affecting the Secure Access client for Ubuntu that could be exploited to achieve remote code execution.

Citrix addressed a critical vulnerability, tracked as CVE-2023-24492 (CVSS score of 9.6), affecting the Secure Access client for Ubuntu that could be exploited to achieve remote code execution.

An attacker can trigger the vulnerability by tricking the victim into opening a specially crafted link and accepting further prompts.

The vulnerability affects versions of Citrix Secure Access client for Ubuntu before 23.5.2, the issue has been addressed in 23.5.2 and later releases.

The vulnerability was reported by Rilke Petrosky of F2TC Cyber Security.

The advisory published by the company did not reveal if the vulnerability has been actively exploited by threat actors in the wild.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Citrix)