8.8

CVE-2024-12284

Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Netscaler Agent SwEdition - Version >= 13.1-4.43 < 13.1-56.18
Citrix ≫ Netscaler Agent SwEdition - Version >= 14.1-4.42 < 14.1-38.53
Citrix ≫ Netscaler Agent Version 13.0-58.30 SwEdition -
Citrix ≫ Netscaler Console Version 13.1 Update build12.50
Citrix ≫ Netscaler Console Version 13.1 Update build17.42
Citrix ≫ Netscaler Console Version 13.1 Update build21.53
Citrix ≫ Netscaler Console Version 13.1 Update build24.38
Citrix ≫ Netscaler Console Version 13.1 Update build27.62
Citrix ≫ Netscaler Console Version 13.1 Update build30.52
Citrix ≫ Netscaler Console Version 13.1 Update build33.50
Citrix ≫ Netscaler Console Version 13.1 Update build37.38
Citrix ≫ Netscaler Console Version 13.1 Update build4.43
Citrix ≫ Netscaler Console Version 13.1 Update build42.47
Citrix ≫ Netscaler Console Version 13.1 Update build45.61
Citrix ≫ Netscaler Console Version 13.1 Update build48.47
Citrix ≫ Netscaler Console Version 13.1 Update build49.13
Citrix ≫ Netscaler Console Version 13.1 Update build50.23
Citrix ≫ Netscaler Console Version 13.1 Update build51.14
Citrix ≫ Netscaler Console Version 13.1 Update build52.19
Citrix ≫ Netscaler Console Version 13.1 Update build53.22
Citrix ≫ Netscaler Console Version 13.1 Update build53.24
Citrix ≫ Netscaler Console Version 13.1 Update build54.29
Citrix ≫ Netscaler Console Version 13.1 Update build55.29
Citrix ≫ Netscaler Console Version 14.1 Update build12.34
Citrix ≫ Netscaler Console Version 14.1 Update build17.38
Citrix ≫ Netscaler Console Version 14.1 Update build21.60
Citrix ≫ Netscaler Console Version 14.1 Update build25.53
Citrix ≫ Netscaler Console Version 14.1 Update build25.56
Citrix ≫ Netscaler Console Version 14.1 Update build29.63
Citrix ≫ Netscaler Console Version 14.1 Update build34.43
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 13.3% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@citrix.com 8.8 0 0
CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US
Vendor Advisory