CVE-2023-24490 Users with only access to launch VDA applications can launch an unauthorized desktop
PublishedUsers with only access to launch VDA applications can launch an unauthorized desktop
Product
2 published CVES affecting citrix linux virtual delivery agent, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Users with only access to launch VDA applications can launch an unauthorized desktop
Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows local users to gain root privileges via unspecified vectors.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.