Read the docs
TI-2024-05700 Aliases CVE-2024-6151GHSA-qcjc-4pgc-2w7h

Improper privilege management in Citrix Windows Virtual Delivery Agent

Priority LOW 38CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00214 11th percentileScored 2026-11-07
Fix Fixed Windows Virtual Delivery Agent (Citrix): 0, CU9, CU5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CitrixWindows Virtual Delivery Agent2402 to before 0; 1912 LTSR to before CU9; 2203 LTSR to before CU50, CU9, CU5Patch availableCNA
  • Windows Virtual Delivery Agent VendorCitrix Affected 2402 to before 0; 1912 LTSR to before CU9; 2203 LTSR to before CU5 Fixed in 0, CU9, CU5 Patch available CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:*up to 2311VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*1912VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:*1912 cu1VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:*1912 cu2VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:*1912 cu3VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:*1912 cu4VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:*1912 cu5VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:*1912 cu6VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:*1912 cu7VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu8:*:*:ltsr:*:*:*1912 cu8VulnerableCitrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:*:*:*:*:-:*:*:* Versions up to 2311 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:* Versions 1912 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu1:*:*:ltsr:*:*:* Versions 1912 cu1 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu2:*:*:ltsr:*:*:* Versions 1912 cu2 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu3:*:*:ltsr:*:*:* Versions 1912 cu3 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu4:*:*:ltsr:*:*:* Versions 1912 cu4 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu5:*:*:ltsr:*:*:* Versions 1912 cu5 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu6:*:*:ltsr:*:*:* Versions 1912 cu6 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu7:*:*:ltsr:*:*:* Versions 1912 cu7 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:1912:cu8:*:*:ltsr:*:*:* Versions 1912 cu8 Vulnerable ·Citrix
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:*2203VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:*2203 cu1VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu2:*:*:ltsr:*:*:*2203 cu2VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu3:*:*:ltsr:*:*:*2203 cu3VulnerableCitrix
cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu4:*:*:ltsr:*:*:*2203 cu4VulnerableCitrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:* Versions 2203 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu1:*:*:ltsr:*:*:* Versions 2203 cu1 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu2:*:*:ltsr:*:*:* Versions 2203 cu2 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu3:*:*:ltsr:*:*:* Versions 2203 cu3 Vulnerable ·Citrix
  • cpe:2.3:a:citrix:virtual_apps_and_desktops:2203:cu4:*:*:ltsr:*:*:* Versions 2203 cu4 Vulnerable ·Citrix

Remediation

  • Fix · CNA Windows Virtual Delivery Agent (Citrix) Fixed in 0, CU9, CU5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6151
  2. 2026-10-03 Alias added: GHSA-qcjc-4pgc-2w7h

References

Advisory 1

  • TI-2023-05679 Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting CVSS 3.1HIGH 7.2
  • TI-2020-06687 OS command injection in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2020-06700 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2020-06686 Improper privilege management in Citrix Virtual Apps and Desktops CVSS 3.1HIGH 8.8
  • TI-2023-10104 Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA CVSS 3.1HIGH 7.8
  • TI-2025-06140 Improper privilege management in Citrix Windows Virtual Delivery Agent for CVAD and… CVSS 4.0HIGH 7.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences