A Citrix Workspace vulnerability that was fixed in July has been found to have a secondary attack vector, which would allow cybercriminals to elevate privileges and remotely execute arbitrary commands under the SYSTEM account. The bug (CVE-2020-8207), exists in the automatic update service of the Citrix Workspace app for Windows.

Read full article on Threat Post