Riskcovery

CVE-2024-8068

Privilege escalation to NetworkService Account access

State
Published
Severity
5.1 Medium
Published
Nov 12, 2024
Updated
Oct 21, 2025
Reserved
Aug 21, 2024

Read the record on cve.org

Description

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Scores

CVSSScoreVectorSource
4.05.1 MediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:NCitrix

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
Citrix Session RecordingCitrix
  • 2407 Current Release to before 24.5.200.8Affected
  • 1912 LTSR to before CU9 hotfix 19.12.9100.6Affected
  • 2203 LTSR to before CU5 hotfix 22.03.5100.11Affected
  • 2402 LTSR to before CU1 hotfix 24.02.1200.16Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.