Workspace app 1912 LTSR does not support Browser Content Redirection (BCR). Workspace app 2006.1 does support Browser Content Redirection (BCR). Download and install Workspace app: Download Workspace app 2009.6 (Current Release) or Workspace app 1912 LTSR Cumulative Update 2. On the VDA, as administrator, run the downloaded CitrixWorkspaceApp.exe. Citrix Workspace app replaces Citrix Receiver. The latest (and last) version of Receiver is 4.12. The last LTSR release is version 4.9.6000. The version of Citrix Workspace app described in this article is 1909, released in September 2019. Citrix Workspace LTSR (.6) TU-065: Important: Disclaimer: This webpage is intended to provide you information about patch announcement for certain specific.
Description of Problem
Vulnerabilities have been identified in Citrix Workspace app and Citrix Receiver for Windows that could result in a local user escalating their privilege level to administrator during the uninstallation process.
The issues have the following identifiers:
Citrix Workspace Ltsr 19.12.1001.3
CVE-2020-13884
CVE-2020-13885
These vulnerabilities affect supported versions of Citrix Workspace app for Windows before 1912 and supported versions of Citrix Receiver for Windows.
These vulnerabilities do not affect Citrix Workspace app and Receiver on any other platforms.
What Customers Should Do
Citrix strongly recommends that customers upgrade to Citrix Workspace app version 1912 or later. Customers using Citrix Receiver are strongly recommended to upgrade to Citrix Workspace app. Customers using Citrix Receiver 4.9 for Windows LTSR may alternatively choose to upgrade to Citrix Receiver 4.9.9002 for Windows LTSR Cumulative Update 9 or later to obtain the fixes.
Customers should upgrade via Auto Update, or by running the installer. Customers should not uninstall the previous version of Citrix Workspace app or Citrix Receiver prior to performing the update.
The latest version of Citrix Workspace app for Windows is available from the following Citrix website location:
The latest version of Citrix Workspace app for Windows LTSR is available from the following Citrix website location:
The latest version of Citrix Receiver for Windows LTSR is available from the following Citrix website location:
Acknowledgements
Citrix would like to thank Andrew Hess for working with us to protect Citrix customers.
What Citrix Is Doing
Citrix is notifying customers and channel partners about this potential security issue. This article is also available from the Citrix Knowledge Center at http://support.citrix.com/.
Obtaining Support on This Issue
If you require technical assistance with this issue, please contact Citrix Technical Support. Contact details for Citrix Technical Support are available at https://www.citrix.com/support/open-a-support-case.html.
Reporting Security Vulnerabilities
Citrix welcomes input regarding the security of its products and considers any and all potential vulnerabilities seriously. For details on our vulnerability response process and guidance on how to report security-related issues to Citrix, please visit the Citrix Trust Center at https://www.citrix.com/about/trust-center/vulnerability-process.html.
Citrix Workspace Ltsr Download
Changelog
Workspace Ltsr 1912
| Date | Change |
| 2020-06-11 | Initial Publication |
| 2020-06-11 | Updated CWA LTSR URL |
| 2020-06-22 | Receiver 4.9.9002 LTSR CU9 released |