CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8068

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Exploit prediction scoring system (EPSS) score

EPSS Score 0.035

EPSS Ranking 87.2%

CVSS Severity

CVSS v3 Score 8.0

Proposed Action

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.

Ransomware Campaign

Unknown

References

https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US

Products affected by CVE-2024-8068

Citrix » Session Recording » Version: 1912

cpe:2.3:a:citrix:session_recording:1912
Citrix » Session Recording » Version: 2103

cpe:2.3:a:citrix:session_recording:2103
Citrix » Session Recording » Version: 2104

cpe:2.3:a:citrix:session_recording:2104
Citrix » Session Recording » Version: 2106

cpe:2.3:a:citrix:session_recording:2106
Citrix » Session Recording » Version: 2107

cpe:2.3:a:citrix:session_recording:2107
Citrix » Session Recording » Version: 2109

cpe:2.3:a:citrix:session_recording:2109
Citrix » Session Recording » Version: 2110

cpe:2.3:a:citrix:session_recording:2110
Citrix » Session Recording » Version: 2112

cpe:2.3:a:citrix:session_recording:2112
Citrix » Session Recording » Version: 2201

cpe:2.3:a:citrix:session_recording:2201
Citrix » Session Recording » Version: 2203

cpe:2.3:a:citrix:session_recording:2203
Citrix » Session Recording » Version: 2204

cpe:2.3:a:citrix:session_recording:2204
Citrix » Session Recording » Version: 2206

cpe:2.3:a:citrix:session_recording:2206
Citrix » Session Recording » Version: 2207

cpe:2.3:a:citrix:session_recording:2207
Citrix » Session Recording » Version: 2209

cpe:2.3:a:citrix:session_recording:2209
Citrix » Session Recording » Version: 2210

cpe:2.3:a:citrix:session_recording:2210
Citrix » Session Recording » Version: 2212

cpe:2.3:a:citrix:session_recording:2212
Citrix » Session Recording » Version: 2303

cpe:2.3:a:citrix:session_recording:2303
Citrix » Session Recording » Version: 2305

cpe:2.3:a:citrix:session_recording:2305
Citrix » Session Recording » Version: 2308

cpe:2.3:a:citrix:session_recording:2308
Citrix » Session Recording » Version: 2311

cpe:2.3:a:citrix:session_recording:2311
Citrix » Session Recording » Version: 2402

cpe:2.3:a:citrix:session_recording:2402
Citrix » Session Recording » Version: 2407

cpe:2.3:a:citrix:session_recording:2407
Citrix » Session Recording » Version: 7.15

cpe:2.3:a:citrix:session_recording:7.15

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8068

Products

Pricing

Contact Us