The host is installed with Citrix Workspace App before 2302 and is prone to an improper access control vulnerability. A flaw is present in the application, which fails to handle issues in unspecified vectors. Successful exploitation allows a malicious local user to gain access to the Citrix Virtual Apps and desktops session of another user who is using the same computer from which the ICA session is launched.