Session Recording vulnerabilities

2 known vulnerabilities in Session Recording from Citrix. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Citrix Session Recording Deserialization of Untrusted Data Exploited

  CVE-2024-8069Nov 12, 2024Citrix Session RecordingEPSS 18.2%

  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

• 8.0 High severity

  Citrix Session Recording Improper Privilege Management Exploited

  CVE-2024-8068Nov 12, 2024CitrixEPSS 3.48%

  Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain