CVE-2024-6677 - Privilege escalation in uberAgent

Back Back to CVE browser

HIGH

Privilege escalation in uberAgent

Published Jul 12, 2024

7.3

HIGH

CVSS 4.0

EPSS 0.22%

Description

Privilege escalation in uberAgent

Affected products

Vendor Citrix Product uberAgent Default
unaffected
Affected
- ≥ 7.2, < 1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Citrix	uberAgent	unaffected	Affected ≥ 7.2, < 1

Vendor Citrix Product Uberagent Default
unknown
Affected
- ≥ 0, < 7.2.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Citrix	Uberagent	unknown	Affected ≥ 0, < 7.2.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47728		Advisory
https://support.citrix.com/article/CTX691103/citrix-uberagent-security-bulletin-for-cve20246677		Broken Link
https://support.citrix.com/external/article/691103/citrix-uberagent-security-bulletin-for-c.html		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Citrix

Published Jul 12, 2024

Updated Mar 25, 2025

Reserved Jul 10, 2024

Link CVE-2024-6677

CISA Vulnrichment

Updated Jul 16, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-6677

Red Hat

No data

ENISA EUVD

Assigner Citrix

Published Jul 12, 2024

Updated Mar 25, 2025

Link EUVD-2024-47728

GitHub

No data