Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2024-8069
CVE-2024-8069:
Citrix Virtual Delivery Agent (VDA) vulnerability analysis and mitigation
Overview
CVE-2024-8069 is a security vulnerability affecting Citrix Session Recording that allows limited remote code execution with NetworkService Account privileges. The vulnerability is exploitable by authenticated users who are on the same intranet as the session recording server (NVD, CVE).
Technical details
The vulnerability has been classified as a deserialization of untrusted data (CWE-502) and improper control of code generation (CWE-94) issue. It has received a CVSS 4.0 Base Score of 5.1 (MEDIUM) with vector string CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Additionally, CISA-ADP has assigned it a CVSS 3.1 Base Score of 8.8 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).
Impact
The vulnerability allows an authenticated attacker to execute code remotely with NetworkService Account privileges on affected Citrix Session Recording servers (NVD).
Mitigation and workarounds
Citrix has released a security bulletin addressing this vulnerability, providing guidance and fixes for affected systems (Citrix Bulletin).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management