CVE-2024-8535

Authenticated user can access unintended user capabilities

Medium · published November 12, 2024

CVSS v4.0
5.8
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources

The record
Technical detail
CVSS v4.0
5.8 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS
0.00420 · 35.2th percentile
Published
2024-11-12T18:28Z
EPSS history
Timeline
  • 12 NOV 18:28Z
    Authenticated user can access unintended user capabilities
    cvelistv5