CVE-2024-8068

HighCVSS 8.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Citrix	Citrix Session Recording	>= 2407 Current Release, < 24.5.200.8; >= 1912 LTSR, < CU9 hotfix 19.12.9100.6; >= 2203 LTSR, < CU5 hotfix 22.03.5100.11; >= 2402 LTSR, < CU1 hotfix 24.02.1200.16

References

Timeline

Published: Nov 12, 2024
Last modified: Jun 17, 2026
Added to CISA KEV: Aug 25, 2025
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-80698.0Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authentica CVE-2024-80708.5CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary CVE-2024-80717.2Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as s CVE-2024-80725.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users CVE-2024-80739.8Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.CVE-2024-80749.3Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Pro CVE-2024-80759.8A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is the CVE-2024-80769.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function set CVE-2024-80779.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTrac CVE-2024-80789.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the func CVE-2024-80799.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function export CVE-2024-80809.8A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of th