Vulnerability Description
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
CVSS Score
8.0
HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Session Recording | < 2407 |
Related Weaknesses (CWE)
References
- https://support.citrix.com/s/article/CTX691941-citrix-session-recording-securityVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-US Government Resource
FAQ
What is CVE-2024-8068?
CVE-2024-8068 is a vulnerability with a CVSS score of 8.0 (HIGH). Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server ...
How severe is CVE-2024-8068?
CVE-2024-8068 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-8068?
Check the references section above for vendor advisories and patch information. Affected products include: Citrix Session Recording.