CVE-2024-8069

Name of the Vulnerable Software and Affected Versions Citrix Virtual Apps and Desktops (CVAD) (affected versions not specified)

Description The issue is related to insufficient deserialization mechanism in the Session Recording component of Citrix Virtual Apps and Desktops (CVAD). This can allow a remote attacker to execute arbitrary code. The exploitation requires the attacker to be an authenticated user on the same intranet as the session recording server, with limited remote code execution and privilege of a NetworkService Account access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.