VULNERABILITY INTELLIGENCE

CVE-2024-8068

CVSS score8 HIGH
EPSS probability3.48%
CISA KEVKnown exploited vulnerability
Published2024-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Citrix Session Recording Improper Privilege Management Vulnerability

Vendor / product: Citrix / Session Recording

Description

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Weakness classification

  • secure@citrix.com: CWE-269

Primary references