High severity · published Jul 24, 2020
CVE-2020-8207
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running
8.8
CVSS
2.1%
EPSS
No
On KEV
Description
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Workspace · Citrix
1912; 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8207
Vendor Advisory
https://support.citrix.com/article/CTX277662
More from Workspace
9.8
CVE-2019-11634
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
8.8
CVE-2024-6148
Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5
7.8
CVE-2025-4879
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
7.8
CVE-2024-6286
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
7.8
CVE-2023-24485
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app