Latest Citrix Virtual Apps and Desktops vulnerabilities #
Citrix has issued a security bulletin for vulnerabilities found within its Session Recording software.
- CVE-2024-8068 is rated Medium with a CVSS score of 5.1, which potentially allows privilege escalation.
- CVE-2024-8069 is rated Medium with a CVSS score of 5.1, which potentially allows remote code execution.
What is the impact? #
The vulnerabilities could allow remote code execution by an attacker. Although the vendor claims that an attacker "must be an authenticated user within the Windows Active Directory domain as the session recording server domain", an alleged unauthenticated proof of concept exploit is available.
Successful exploitation of this attack is reported to allow remote code execution, potentially leading to total compromise of the vulnerable system.
Are updates or workarounds available? #
Within the advisory above, the vendor suggests affected customers to upgrade the Session Recording software as soon as "their upgrade schedule permits".
How to find potentially vulnerable systems with runZero #
From the Service Inventory, use the following query to locate systems running potentially vulnerable software:
has:"html.title" html.title:"Citrix Virtual Apps and Desktops"
