High severity8.1NVD Advisory· Published Nov 12, 2024· Updated Jun 17, 2026

CVE-2024-8535

Description

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources

Affected products

Citrix Systems/Netscaler Application Delivery Controller3 versions
cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*+ 2 more
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*range: >=12.1,<13.1-55.34
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*range: >=12.1,<12.1-55.321
- cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*range: >=12.1,<12.1-55.321
Citrix Systems/Access Gateway
cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*
Range: >=12.1,<13.1-55.34
Citrix Systems/NetScaler ADCllm-fuzzy
Citrix Systems/NetScaler Gatewayllm-fuzzy
Netscaler/NetScaler ADCcpe-rescue
Range: 14.1
Netscaler/NetScaler Gatewaycpe-rescue
Range: 14.1

Patches

Vulnerability mechanics

References

support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000