{"id":6057,"date":"2025-02-20T05:49:02","date_gmt":"2025-02-20T05:49:02","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/citrix-fixes-netscaler-privilege-escalation-flaw\/"},"modified":"2025-02-20T05:49:03","modified_gmt":"2025-02-20T05:49:03","slug":"citrix-fixes-netscaler-privilege-escalation-flaw","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/citrix-fixes-netscaler-privilege-escalation-flaw\/","title":{"rendered":"Citrix Fixes NetScaler Privilege Escalation Flaw"},"content":{"rendered":"\n<\/p>\n
\n

\ue802<\/i>February 20, 2025<\/span>\ue804<\/i>Ravie Lakshmanan<\/span><\/span>Vulnerability \/ IT Security<\/span><\/p>\n<\/div>\n

\n
\n<\/p>\n

<\/a>\n<\/div>\n

Citrix has issued security updates to address a high-severity vulnerability affecting NetScaler Console (previously known as NetScaler ADM) and NetScaler Agent, which could potentially lead to privilege escalation under specific conditions.<\/p>\n

The vulnerability, identified as CVE-2024-12284<\/a><\/strong>, has been assigned a CVSS v4 score of 8.8 out of 10.0.<\/p>\n

This issue is attributed to improper privilege management, which could result in authenticated privilege escalation if the NetScaler Console Agent is deployed, allowing an attacker to execute post-compromise actions.<\/p>\n

“The problem arises from inadequate privilege management, which could be exploited by an authenticated malicious actor to execute commands without additional authorization,” according to Netscaler noted<\/a>.<\/p>\n

“However, only authenticated users with existing access to the NetScaler Console can exploit this vulnerability, thus limiting the threat surface to only authenticated users.”<\/p>\n

\n

\n
\n\"Cybersecurity\"
\n<\/a>
\n<\/center>\n<\/div>\n

The vulnerability affects the following versions:<\/p>\n