The new Citrix Workspace app (formerly known as Citrix Receiver) provides a great user experience — a secure, contextual, and unified workspace — on any device. It gives you instant access to all. Citrix Workspace is the future of work—it’s a single, secure intelligent work platform that organizes, guides and automates the most important information that people need. This speeds decision-making and collaboration in the context of work.

Citrix strongly recommends that customers upgrade to Citrix Workspace app version 1912 or later. Customers using Citrix Receiver are strongly recommended to upgrade to Citrix Workspace app. Customers using Citrix Receiver 4.9 for Windows LTSR may alternatively choose to upgrade to Citrix Receiver 4.9.9002 for Windows LTSR Cumulative Update 9 or later to obtain the fixes. Citrix Cloud supports a variety of identity providers to authenticate the end-users who access workspaceresources.Afteryoucompletethisstepinthewalkthrough,youcanselectyourconfigured identityproviderastheworkspaceauthenticationmethodinStep4:Customizeyourworkspace.

Applicable Products

• Citrix Workspace App
• Receiver for Windows

Description of Problem

Vulnerabilities have been identified in Citrix Workspace app and Citrix Receiver for Windows that could result in a local user escalating their privilege level to administrator during the uninstallation process.

The issues have the following identifiers:

• CVE-2020-13884

• CVE-2020-13885

These vulnerabilities affect supported versions of Citrix Workspace app for Windows before 1912 and supported versions of Citrix Receiver for Windows.

These vulnerabilities do not affect Citrix Workspace app and Receiver on any other platforms.

What Customers Should Do

Citrix strongly recommends that customers upgrade to Citrix Workspace app version 1912 or later. Customers using Citrix Receiver are strongly recommended to upgrade to Citrix Workspace app. Customers using Citrix Receiver 4.9 for Windows LTSR may alternatively choose to upgrade to Citrix Receiver 4.9.9002 for Windows LTSR Cumulative Update 9 or later to obtain the fixes.

Customers should upgrade via Auto Update, or by running the installer. Customers should not uninstall the previous version of Citrix Workspace app or Citrix Receiver prior to performing the update.

The latest version of Citrix Workspace app for Windows is available from the following Citrix website location:

The latest version of Citrix Workspace app for Windows LTSR is available from the following Citrix website location:

The latest version of Citrix Receiver for Windows LTSR is available from the following Citrix website location:

Acknowledgements

Citrix would like to thank Andrew Hess for working with us to protect Citrix customers.

What Citrix Is Doing

Citrix is notifying customers and channel partners about this potential security issue. This article is also available from the Citrix Knowledge Center at http://support.citrix.com/.

Obtaining Support on This Issue

If you require technical assistance with this issue, please contact Citrix Technical Support. Contact details for Citrix Technical Support are available at https://www.citrix.com/support/open-a-support-case.html.

Reporting Security Vulnerabilities

Citrix welcomes input regarding the security of its products and considers any and all potential vulnerabilities seriously. For details on our vulnerability response process and guidance on how to report security-related issues to Citrix, please visit the Citrix Trust Center at https://www.citrix.com/about/trust-center/vulnerability-process.html.

Changelog

downloadWhy can't I download this file?Citrix Workspace App Home Page

Objective

• This release requires .NET Framework Version 4.6.2 or later. If you are trying to install or upgrade to Citrix Workspace app 1904 or later and the requisite version of the .NET Framework is not available on your Windows system, the Citrix Workspace app installer will download and install the required version of the .NET Framework.
  Note: If you are trying to install or upgrade Citrix Workspace app with non-administrator privileges and.NET Framework 4.6.2 or greater is not present on the system, the installation fails.
• This release requires Microsoft Visual C++ Redistributable 14.16.27012.6 or later. Starting with Version 1904, Microsoft Visual C++ Redistributable individual binaries are no longer packaged with the Citrix Workspace app installer. Instead, the Citrix Workspace app installer includes the Microsoft Visual C++ Redistributable 14.16.27012.6 installer. When you install Citrix Workspace app, the Citrix Workspace app installer checks whether the Microsoft Visual C++ Redistributable package is present on the system and installs it if necessary.

This document aims to guide you through the installation process of both prerequisites and addresses issues you might face.
Troubleshooting issues with installing the .NET Framework
Troubleshooting issues with installing the Microsoft Visual C++ Redistributable

Troubleshooting issues with installing the .NET Framework

• The minimum required version of the .NET Framework is not installed before installing Citrix Workspace app
  The Citrix Workspace app installer downloads the .NET Framework Version 4.6.2 installation package from Microsoft and then installs it. This process might take several minutes.
  

• The following error message appears when you launch the Citrix Workspace app installer.
  This dialog appears during network issues. You must have active Internet connectivity. Check your internet connection and try again.

• The following error message appears when you launch the Citrix Workspace app installer.
  Installing the .NET Framework requires administrator privileges. Run the Citrix Workspace installer as an administrator by selecting Run as Administrator.

• The following message appears after you install Citrix Workspace app.
  In some scenarios, you must restart your system your system for the installation to complete. Click Yes to restart your system.
  Note: If you click No, the following error message appears when you try to launch Citrix Workspace app. Restart your system to complete the .NET Framework installation and changes to take effect.
  Troubleshooting issues with installing the Microsoft Visual C++ Redistributable

• The minimum required version of the Microsoft Visual C++ Redistributable package is not installed before installing Citrix Workspace app.
  The Citrix Workspace app installer installs the Microsoft Visual C++ Redistributable using the installation package bundled with the Citrix Workspace app installer. This process might take several minutes.
  

Citrix Downloads Workspace App Windows

• The following error message appears when you launch the Citrix Workspace app installer.
  Installing the Microsoft Visual C++ Redistributable package requires administrator privileges. Run the Citrix Workspace installer as an administrator by selecting Run as Administrator log on as an administrator to install the Microsoft Visual C++ Redistributable package manually.
  

Additional Resources

Citrix Receiver Vs Citrix Workspace App

1. For information about .NET Framework 4.6.2 system requirements, see the related Microsoft article.
2. To manually download and install the required version of the .NET Framework, see the related Microsoft article.
3. For additional information about .NET Framework 4.6.2, see the related Microsoft blog.
4. Microsoft Visual C++ Redistributable packages can be downloaded here.