CVE-2019-11634

Citrix Workspace software had a remote code execution vulnerability actively exploited by ransomware actors, allowing attackers to execute arbitrary code on affected systems.

CVE-2019-11634 in Citrix Workspace allowed attackers to execute code due to improperly enforced local drive access, which is a significant risk for DIB organizations using Citrix solutions; this failure exposes systems to ransomware and compliance violations (NIST 800-171 controls 3.1.1, 3.1.2, 3.1.3); immediately patch vulnerable systems and review Citrix configurations.

Shame score — The vulnerability was actively exploited by ransomware groups, indicating a failure to adequately secure a widely-used product and a lack of proactive security measures.