Vulnerability · Published Jul 10, 2024 · Assigned by Citrix
CVE-2024-6150
Medium 4.8
In plain English
A medium-severity incorrect authorization in Citrix Provisioning from Citrix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 4.0)4.8Medium
Exploit odds (30 days)0.2%top 85.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Citrix Provisioning | 2402 – before 022.3 LTSR – before CU51912 LTSR – before CU9 |
Weakness: CWE-863 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N