Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.

A malicious user can cause log files to be written to a directory that they do not have permission to write to.