CISA Known Exploited Vulnerability

CVE-2019-11634 Ransomware

Citrix · Workspace Application and Receiver for Windows

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

Date added 2021-11-03

BOD 22-01 due date 2022-05-03

CWE —

Ransomware Known

CISA description

Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.

Required action

Apply updates per vendor instructions.

Notes & references

https://nvd.nist.gov/vuln/detail/CVE-2019-11634

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

RA-5 · Vulnerability Monitoring and Scanning
SI-2 · Flaw Remediation
CM-6 · Configuration Settings
SI-7 · Software, Firmware, and Information Integrity
CM-8 · System Component Inventory

External lookups

NVD · CVE-2019-11634
CVE.org · CVE-2019-11634
CISA KEV catalog (canonical)