CVE-2024-8068

🗓️ 12 Nov 2024 17:49:54Reported by CitrixType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 3471 Views

Privilege escalation in Citrix Session Recordin

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Session Recording component of software for virtualization and application delivery in Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop) allows a attacker to execute arbitrary code.	22 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-8068	12 Nov 202416:21	–	circl
CISA KEV Catalog	Citrix Session Recording Improper Privilege Management Vulnerability	25 Aug 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	25 Aug 202512:00	–	cisa
CISA	Citrix Releases Security Updates for NetScaler and Citrix Session Recording	12 Nov 202412:00	–	cisa
Tenable Nessus	Citrix Virtual Apps and Desktops Session Recording Multiple Vulnerabilities (CTX691941)	14 Nov 202400:00	–	nessus
CNNVD	Citrix Systems Virtual Apps and Desktops 安全漏洞	12 Nov 202400:00	–	cnnvd
Citrix	Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069	12 Nov 202407:00	–	citrix
Cvelist	CVE-2024-8068 Privilege escalation to NetworkService Account access	12 Nov 202417:49	–	cvelist
EUVD	EUVD-2024-49530	3 Oct 202520:07	–	euvd

NVD

Node

citrix session_recordingRange<2407-

citrix session_recordingMatch1912-ltsr

citrix session_recordingMatch1912cu1ltsr

citrix session_recordingMatch1912cu2ltsr

citrix session_recordingMatch1912cu3ltsr

citrix session_recordingMatch1912cu4ltsr

citrix session_recordingMatch1912cu5ltsr

citrix session_recordingMatch1912cu6ltsr

citrix session_recordingMatch1912cu7ltsr

citrix session_recordingMatch1912cu8ltsr

citrix session_recordingMatch2203-ltsr

citrix session_recordingMatch2203cu1ltsr

citrix session_recordingMatch2203cu2ltsr

citrix session_recordingMatch2203cu3ltsr

citrix session_recordingMatch2203cu4ltsr

citrix session_recordingMatch2203cu5ltsr

citrix session_recordingMatch2402-ltsr

citrix session_recordingMatch2407--

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Session Recording",
    "vendor": "Citrix",
    "versions": [
      {
        "lessThan": "24.5.200.8",
        "status": "affected",
        "version": "2407 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "CU9 hotfix 19.12.9100.6",
        "status": "affected",
        "version": "1912 LTSR",
        "versionType": "patch"
      },
      {
        "lessThan": "CU5 hotfix 22.03.5100.11",
        "status": "affected",
        "version": "2203 LTSR",
        "versionType": "patch"
      },
      {
        "lessThan": "CU1 hotfix 24.02.1200.16",
        "status": "affected",
        "version": "2402 LTSR",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 08:21Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18

CVSS 45.1

EPSS0.01399

SSVC