session recording vulnerabilities and fixes

Recent CVEs affecting session recording, with upgrade or downgrade steps. 2 tracked.

Also searched as: sessionrecording.

session recording has 2 tracked vulnerabilities, 0 critical and 2 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 2. Most recent: 2024-11-12. Highest priority: CVE-2024-8069 (score 77/100).

• CVE-2024-8069 HIGH 8.0 EXPLOITED UPGRADE Citrix Session Recording Deserialization of Untrusted Data Vulnerability
• CVE-2024-8068 HIGH 8.0 EXPLOITED UPGRADE Citrix Session Recording Improper Privilege Management Vulnerability

FAQ

How do I fix session recording vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is session recording being exploited right now?

Yes: 2 session recording CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which session recording CVE should I patch first?

CVE-2024-8069 currently ranks highest (77/100): Citrix Session Recording Deserialization of Untrusted Data Vulnerability.

← Back to latest CVEs