coldbraid

CVE-2024-8068 Citrix Session Recording

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.

CVSS
not scored

CWE-269

On CISA’s exploited list

Citrix Session Recording Improper Privilege Management Vulnerability

Added
2025-08-25
Federal patch deadline
2025-09-15
Ransomware use
not known