Citrix Session Recording Improper Privilege Management Vulnerability

Technical Severity

CVSS v3.1 Metrics

HIGH

8 / 10

Minimal Risk Critical

Vector Specification

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation Likelihood

EPSS Prediction

8.05 %

Predictive Probability

Percentile Rank

92.1 th

Documented as more likely to be exploited than 92.1% of known CVEs.

Detection Date

Aug 25, 2025

Remediation Due

Sep 15, 2025

CISA Catalog Active

Threat Analysis

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.

Remediation Directive

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2024-8068