CVE-2024-8535

Summary

CVE-2024-8535 is a new vulnerability affecting NetScaler ADC and NetScaler Gateway. This authenticated user vulnerability grants unintended capabilities if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos Single Sign-On (SSO) to access backend resources. Successful exploitation could potentially lead to elevated privileges, posing a significant risk to targeted networks. Organizations using these products are advised to apply relevant patches or updates as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.