CVE-2020-8269: 
Citrix Virtual Delivery Agent (VDA) vulnerability analysis and mitigation

A security vulnerability identified as CVE-2020-8269 was discovered in Citrix Virtual Apps and Desktops (CVAD). The vulnerability affects multiple versions of CVAD including versions before 2009, 1912 LTSR CU1, 7.15 LTSR CU6, and 7.6 LTSR CU9. This security issue was initially recorded on January 28, 2020 (CVE MITRE).

The vulnerability allows an unprivileged Windows user on the Virtual Delivery Agent (VDA) to perform arbitrary command execution with SYSTEM privileges. This affects CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344, and 7.6 LTSR CU9 (NVD NIST).

The vulnerability enables an authenticated user with unprivileged access to execute arbitrary commands with SYSTEM-level privileges, effectively allowing complete system compromise on affected Virtual Delivery Agent (VDA) installations (Citrix Security).

Citrix has released several hotfixes to address this vulnerability: CTX285870 and CTX286120 for version 1912 LTSR CU1, CTX285344 for version 7.15 LTSR CU6, and an update for version 7.6 LTSR CU9. Users are advised to apply these security updates to mitigate the vulnerability (Citrix Security).