CVE-2024-8068

Summary

CVE-2024-8068 is a newly disclosed privilege escalation vulnerability that affects Citrix Session Recording. When an attacker is an authenticated user in the same Active Directory domain as the session recording server, they can exploit this vulnerability to gain unauthorized access to the NetworkService Account. This could potentially lead to significant security implications, including unauthorized access to sensitive data or system modifications. The exact cause of the vulnerability remains undisclosed, but affected organizations are urged to apply the forthcoming patch as soon as it becomes available to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.