Description
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Citrix Session Recording | Citrix Session Recording / Citrix Session Recording | >= 1912 LTSR, < CU9 hotfix 19.12.9100.6 | affected |
| Citrix Session Recording | Citrix Session Recording / Citrix Session Recording | >= 2203 LTSR, < CU5 hotfix 22.03.5100.11 | affected |
| Citrix Session Recording | Citrix Session Recording / Citrix Session Recording | >= 2402 LTSR, < CU1 hotfix 24.02.1200.16 | affected |
| Citrix Session Recording | Citrix Session Recording / Citrix Session Recording | >= 2407 Current Release, < 24.5.200.8 | affected |