Citrix Session Recording vulnerabilities

2 known vulnerabilities affecting citrix/citrix_session_recording.

Total CVEs

2

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-8068MEDIUMCVSS 5.1KEV≥ 2407 Current Release, < 24.5.200.8≥ 1912 LTSR, < CU9 hotfix 19.12.9100.6+2 more2024-11-12

CVE-2024-8068 [MEDIUM] CWE-269 CVE-2024-8068: Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker i Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

CVE-2023-6184HIGHCVSS 7.2PoC2024-01-16

CVE-2023-6184 [HIGH] CWE-913 Citrix Session Recording Security Bulletin for CVE-2023-6184 Citrix Session Recording Security Bulletin for CVE-2023-6184 Pre-requisites CWE CVE-2023-6184 An authenticated user can perform RCE Attacker must possess admin privileges to the Session Recording server CWE-913 Instructions Cloud Software Group strongly urges affected customers of Citrix Session Recording to install the relevant updated versions of Citrix Session Recording as soon their upgrade schedule pe