WID-SEC-W-2024-3443

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Citrix Systems Virtual Apps and Desktops: Mehrere Schwachstellen

view advisory published 2024-11-12

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Citrix Systems Virtual Apps and Desktops ausnutzen, um seine Privilegien zu erhöhen und Code auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2024-8069UShigh8.0OT criticalKEV
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the ses…
CVE-2024-8068UShigh8.0OT criticalKEV
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the sessi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan