CVE-2024-8069 — Limited remote code execution with privilege of a NetworkService Account access

CVE-2024-8069

Limited remote code execution with privilege of a NetworkService Account access PUBLISHED

Description (CNA)

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

Affected (CNA)

Vendor / product	Versions
Citrix Session Recording / Citrix Session Recording	affected 2407 Current Release before 24.5.200.8; affected 1912 LTSR before CU9 hotfix 19.12.9100.6; affected 2203 LTSR before CU5 hotfix 22.03.5100.11; affected 2402 LTSR before CU1 hotfix 24.02.1200.16

CWE

CWE-502

References

https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8069