CVE-2020-13884

Citrix Workspace App before 2006.1 on Windows has Insecure Permissions for %PROGRAMDATA%Citrix (and an unquoted UninstallString), which allows local users to gain privileges by copying a malicious citrix.exe there.

Source: CVE-2020-13884