← Back to browse · API

CVE-2024-8068

Severity
MEDIUM
CVSS
5.1
EPSS
0.01399
Risk score
45.89
CISA KEV
Yes
PoC
No
Published
2024-11-12
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2024-49530, GHSA-C43Q-QJ38-7P5J
Products
Citrix Session Recording:Citrix Session Recording 1912 LTSR <CU9 hotfix 19.12.9100.6, Citrix Session Recording:Citrix Session Recording 2203 LTSR <CU5 hotfix 22.03.5100.11, Citrix Session Recording:Citrix Session Recording 2402 LTSR <CU1 hotfix 24.02.1200.16, Citrix Session Recording:Citrix Session Recording 2407 Current Release <24.5.200.8, Citrix:Session Recording
Sources
euvd EUVD-2024-49530
cisa.gov CVE-2024-8068

Description

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

References