CVE-2024-8535

HIGH

NetScaler ADC - Privilege Escalation

Title source: llm

Description

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources

References (1)

[Vendor Advisory] https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US

Scores

CVSS v3 8.1

EPSS 0.0043

EPSS Percentile 62.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-552

Status published

Affected Products (4)

citrix/netscaler_application_delivery_controller < 12.1-55.321

citrix/netscaler_application_delivery_controller < 13.1-55.34

citrix/netscaler_gateway < 13.1-55.34

Timeline

Published Nov 12, 2024

Tracked Since Feb 18, 2026