New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-8069+1 related CVE | Insecure Deserialization RCE in Citrix Session Recording | 5.1 | 21% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Nov 12, 2024 Virtualization / Vulnerability Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE) The issue, per findings from watchTowr , is rooted in the Session Recording component that allows system administrators to capture user activity, and record keyboard and…
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.