Latest Citrix Virtual Apps and Desktops vulnerabilities #

Citrix has issued a security bulletin for vulnerabilities found within its Session Recording software.

  • CVE-2024-8068 is rated Medium with a CVSS score of 5.1, which potentially allows privilege escalation.
  • CVE-2024-8069 is rated Medium with a CVSS score of 5.1, which potentially allows remote code execution.

What is the impact? #

The vulnerabilities could allow remote code execution by an attacker. Although the vendor claims that an attacker "must be an authenticated user within the Windows Active Directory domain as the session recording server domain", an alleged unauthenticated proof of concept exploit is available.

Successful exploitation of this attack is reported to allow remote code execution, potentially leading to total compromise of the vulnerable system.

Are updates or workarounds available? #

Within the advisory above, the vendor suggests affected customers to upgrade the Session Recording software as soon as "their upgrade schedule permits".

How to find potentially vulnerable systems with runZero #

From the Service Inventory, use the following query to locate systems running potentially vulnerable software:

has:"html.title" html.title:"Citrix Virtual Apps and Desktops"

Written by runZero Team

Due to the nature of their research and out of respect for their privacy, runZero team members prefer to remain anonymous. Their work is published under the runZero name.

More about runZero Team
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.


Related Articles

Rapid Response
How to find Cisco NX-OS assets on your network
Cisco has released an advisory for a vulnerability found within their NX-OS software. Here's how to find affected assets.
Rapid Response
How to find FortiManager instances on your network
How to find FortiManager instances on your network using runZero
Rapid Response
How to find SolarWinds Web Help Desk services on your network
CISA has announced that CVE-2024-28987 is actively being exploited in SolarWinds' Web Help Desk software. Here's how to find potentially affected...
Rapid Response
How to find SuperMicro BMCs
Supermicro released a vulnerability advisory for a critical CVE that allows for remote code execution (CVE-2024-36435). Here's how to find impacted...

See Results in Minutes

Get complete visibility into IT, OT, & IoT — without agents, credentials, or hardware.

© Copyright 2024 runZero, Inc. All Rights Reserved