Ce mail provient de l'extérieur, restons vigilants

=====================================================================

                            CERT-Renater

                Note d'Information No. 2025/VULN383

_____________________________________________________________________

DATE                : 20/06/2025

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Citrix Secure Access Client for
                        Windows versions prior to 25.5.1.15.

=====================================================================
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694724&articleURL=Citrix_Secure_Access_Client_for_Windows_Security_Bulletin_for_CVE_2025_0320
_____________________________________________________________________

Citrix Secure Access Client for Windows Security Bulletin for
CVE-2025-0320

Article Id : CTX694724
Last Modified Date : 06-17-2025 16:03
Created Date : 06-17-2025 11:54
Article Record Type : Security Bulletin


Summary

Severity - High


Description of Problem

A vulnerability has been discovered in the Citrix Secure Access Client
for Windows. Refer to below for further details: 
Affected Versions

The following supported versions of Citrix Secure Access Client for
Windows are affected:

    Citrix Secure Access Client for Windows versions BEFORE
      25.5.1.15


Details

Citrix Secure Access Client for Windows contains a vulnerability
mentioned below

CVE-ID      Description     Pre-conditions    CWE    CVSSv4

CVE-2025-0320   
Local Privilege escalation allows a low-privileged user to gain
SYSTEM privileges
Standard user access on local system 
CWE-269: Improper Privilege Management
CVSS v4.0 Base Score: 8.5
(CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)


What Customers Should Do

Cloud Software Group strongly urges customers of Citrix Secure
Access Client for Windows  to install the relevant updated
versions as soon as possible: 

    Citrix Secure Access Client for Windows 25.5.1.15 and
     later releases


Acknowledgements

Cloud Software Group thanks Damien Foulde of Axians for working
with us to protect Cloud Software Group customers.


Additional information / Reference

Changelog

2025-06-17 	Initial Publication


Disclaimer

The information on this page is being provided to you on an "AS
IS" and "AS-AVAILABLE" basis. The issues described on this page
may or may not impact your system(s). Cloud Software Group,
Inc. and its subsidiaries (collectively, "Cloud SG") make no
representations, warranties, or guarantees as to the information
contained herein. ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED,
INCLUDING, WITHOUT LIMITATION, INCLUDING, BUT NOT LIMITED TO,
IMPLIED WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT AND
FITNESS FOR A PARTICULAR PURPOSE ARE HEREBY DISCLAIMED. BY
ACCESSING THIS PAGE, YOU ACKNOWLEDGE THAT CLOUD SG SHALL IN
NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR
USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN.
Cloud SG reserves the right to change or update the
information on this page at any time. We accordingly
recommend that you always view the latest version of this
page. The information contained herein is being provided
to you under the terms of your applicable customer agreement
with Cloud SG, and may be used only for the purposes
contemplated by such agreement. If you do not have such an
agreement with Cloud SG, this information is provided under
the cloud.com Terms of Use, and may be used only for the
purposes contemplated by such Terms of Use.

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================