title: A malicious user can cause log files to be written to a directory that they do not have permission to write to.
description: A malicious user can cause log files to be written to a directory that they do not have permission to write to.
problem types: CWE-284 Improper Access Control
affected:
{
vendor: Citrix
product: Citrix Workspace App for Windows
versions:
version: Citrix Workspace App versions, status: affected, lessThan: 2212, versionType: custom, changes: [at: 2203 LTSR before CU2 , status: unaffected]
}
workarounds: These vulnerabilities are only exposed by a Windows Administrator or SYSTEM process (e.g. SCCM) performing the installation or uninstallation of a vulnerable version of Citrix Workspace App. Customers will only be affected by these vulnerabilities if they perform these actions using a vulnerable version of Citrix Workspace app for Windows.