title: Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows
description: Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
problem types: CWE-284 Improper Access Control
affected:
{
vendor: Citrix
product: Citrix Workspace App for Windows
versions:
version: Citrix Workspace App versions, status: affected, lessThan: 2212, versionType: custom, changes: [at: 2203 LTSR before CU2 , status: unaffected]
}
workarounds: These vulnerabilities are only exposed by a Windows Administrator or SYSTEM process (e.g. SCCM) performing the installation or uninstallation of a vulnerable version of Citrix Workspace App. Customers will only be affected by these vulnerabilities if they perform these actions using a vulnerable version of Citrix Workspace app for Windows.