CVE-2024-8068
Citrix Session Recording Improper Privilege Management Vulnerability
CVSS
—
Sin CVSS
EPSS
1.4%
p70
KEV
SÍ
25 ago 2025
Exploit Today
71
0-100
Publicado: — · Última mod.: —
Producto
Citrix / Session Recording
Vulnerabilidad
Citrix Session Recording Improper Privilege Management Vulnerability
Añadido a KEV
25 ago 2025
Remediar antes de
15 sept 2025
Uso conocido en ransomware
No
Descripción resumida
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.
Acción requerida
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8068