Riskcovery

CVE-2024-8069

Limited remote code execution with privilege of a NetworkService Account access

State
Published
Severity
5.1 Medium
Published
Nov 12, 2024
Updated
Oct 21, 2025
Reserved
Aug 21, 2024

Read the record on cve.org

Description

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

Scores

CVSSScoreVectorSource
4.05.1 MediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:NCitrix

Weaknesses

  • CWE-502 Deserialization of Untrusted Data

Affected Products

ProductVersions
Citrix Session RecordingCitrix Session Recording
  • 2407 Current Release to before 24.5.200.8Affected
  • 1912 LTSR to before CU9 hotfix 19.12.9100.6Affected
  • 2203 LTSR to before CU5 hotfix 22.03.5100.11Affected
  • 2402 LTSR to before CU1 hotfix 24.02.1200.16Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.