Users with only access to launch VDA applications can launch an unauthorized desktop
CWE-284, NVD-CWE-Other