High severity8.0CISA KEVNVD Advisory· Published Nov 12, 2024· Updated Jun 17, 2026
CVE-2024-8068
CVE-2024-8068
Description
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:citrix:session_recording:*:*:*:*:-:*:*:*+ 19 more
- cpe:2.3:a:citrix:session_recording:*:*:*:*:-:*:*:*range: <2407
- cpe:2.3:a:citrix:session_recording:1912:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu1:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu2:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu3:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu4:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu5:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu6:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu7:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu8:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu1:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu2:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu3:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu4:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu5:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2402:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2407:-:*:*:-:*:*:*
- (no CPE)
- (no CPE)range: 2407 Current Release
Patches
Vulnerability mechanics
References
2- support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.