Citrix Session Recording Privilege Escalation and RCE Security Bulletin (CVE-2024-8068/8069)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Title: Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069 - Vulnerability Type: Privilege escalation to NetworkService Account access and Limited remote code execution with privilege of a NetworkService Account access - Impact: Citrix Session Recording 2407 hotfix 24.5.200.8 and later versions, Citrix Session Recording 1912 LTSR CU9 hotfix 19.12.9100.6 and later versions, Citrix Session Recording 2203 LTSR CU5 hotfix 22.03.5100.11 and later versions, and Citrix Session Recording 2402 LTSR CU1 hotfix 24.02.1200.16 and later versions. 2. Solution: - Affected Versions: Citrix Session Recording 2407 hotfix 24.5.200.8 and later, Citrix Session Recording 1912 LTSR CU9 hotfix 19.12.9100.6 and later, Citrix Session Recording 2203 LTSR CU5 hotfix 22.03.5100.11 and later, and Citrix Session Recording 2402 LTSR CU1 hotfix 24.02.1200.16 and later. - Recommended Action: Install the updated versions of Citrix Session Recording. 3. Vulnerability Details: - CWE: CWE-269: Improper Privilege Management and CWE-502: Deserialization of Untrusted Data - CVSS Base Score: 5.1 4. Affected Users: - Affected Users: Users of Citrix Session Recording. 5. Update History: - Update Dates: November 12, 2024, and November 14, 2024 - Update Content: Replaced with Citrix Session Recording to better reflect the affected product. 6. Disclaimer: - Disclaimer: Information is provided "AS IS" and "AS AVAILABLE" without warranty of accuracy or completeness. 7. Contact Information: - Technical Support: Citrix Technical Support, contact via https://www.citrix.com/support/open-a-support-case. 8. Subscription for Updates: - Subscription Recommendation: Subscribe to Citrix security bulletin updates. 9. Reporting Vulnerabilities: - Reporting Method: Report security vulnerabilities via https://www.citrix.com/about/trust-center/vulnerability-process.html. This information helps users understand the details of the vulnerability, affected versions, remediation steps, and how to report issues or obtain technical support.

Goal Reached Thanks to every supporter — we hit 100%!

Citrix Session Recording Privilege Escalation and RCE Security Bulletin (CVE-2024-8068/8069)