CVE-2024-8535
Status: AnalyzedMedium (5.8)—
Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources
CVSS
- Version: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Base score: 5.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.42%
- Percentile among all scored CVEs: 34
- Score date: 9/30/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (2)
CWEs
- CWE-552
References
Raw JSON (NVD)
Show
{
"id": "CVE-2024-8535",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-8535",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-11-13T20:05:08.852710Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.1,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.2
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "secure@citrix.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 5.8,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"subIntegrityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "HIGH",
"vulnConfidentialityImpact": "LOW",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "secure@citrix.com",
"affectedData": [
{
"vendor": "NetScaler",
"product": "NetScaler ADC",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThan": "29.72",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1",
"lessThan": "55.34",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1 FIPS",
"lessThan": "37.207",
"versionType": "patch"
},
{
"status": "affected",
"version": "12.1-FIPS",
"lessThan": "55.321",
"versionType": "patch"
},
{
"status": "affected",
"version": "12.1-NDcPP",
"lessThan": "55.321",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "NetScaler",
"product": "NetScaler Gateway",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThan": "29.72",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1",
"lessThan": "55.34",
"versionType": "patch"
},
{
"status": "affected",
"version": "13.1-FIPS",
"lessThan": "37.207",
"versionType": "patch"
},
{
"status": "affected",
"version": "12.1-FIPS",
"lessThan": "55.321",
"versionType": "patch"
},
{
"status": "affected",
"version": "12.1-NDcPP",
"lessThan": "55.321",
"versionType": "patch"
}
],
"defaultStatus": "unaffected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:netscaler:adc:*:*:*:*:*:*:*:*"
],
"vendor": "netscaler",
"product": "adc",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThan": "29.72",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.1",
"lessThan": "55.34",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.1fips",
"lessThan": "37.207",
"versionType": "custom"
},
{
"status": "affected",
"version": "12.1-fips",
"lessThan": "55.321",
"versionType": "custom"
},
{
"status": "affected",
"version": "12.1-ndcpp",
"lessThan": "55.321",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:netscaler:gateway:*:*:*:*:*:*:*:*"
],
"vendor": "netscaler",
"product": "gateway",
"versions": [
{
"status": "affected",
"version": "14.1",
"lessThan": "29.72",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.1",
"lessThan": "55.34",
"versionType": "custom"
},
{
"status": "affected",
"version": "13.1fips",
"lessThan": "37.207",
"versionType": "custom"
},
{
"status": "affected",
"version": "12.1-fips",
"lessThan": "55.321",
"versionType": "custom"
},
{
"status": "affected",
"version": "12.1-ndcpp",
"lessThan": "55.321",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-11-12T19:15:19.040",
"references": [
{
"url": "https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US",
"tags": [
"Vendor Advisory"
],
"source": "secure@citrix.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-552"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources"
},
{
"lang": "es",
"value": "El usuario autenticado puede acceder a las capacidades de usuario no deseadas en NetScaler ADC y NetScaler Gateway si el dispositivo debe configurarse como un Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend O el dispositivo debe configurarse como un servidor de autenticación (AAA Vserver) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend "
}
],
"lastModified": "2026-06-17T08:22:48.703",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5EE3463-C7DB-493D-A14E-7A8891B903D9",
"versionEndExcluding": "12.1-55.321",
"versionStartIncluding": "12.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EAF1004-344C-4A0A-A1B6-A8932D763724",
"versionEndExcluding": "12.1-55.321",
"versionStartIncluding": "12.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F832616-B768-4B98-AF21-3C32CB1F9A3B",
"versionEndExcluding": "13.1-55.34",
"versionStartIncluding": "12.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23A038D6-AA3B-4833-AEE8-0DCE05DC21E9",
"versionEndExcluding": "13.1-37.207",
"versionStartIncluding": "13.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29410A07-D4E1-4D0F-BC78-4A2323325370",
"versionEndExcluding": "14.1-29.72",
"versionStartIncluding": "14.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B767B864-9D9B-4C28-A216-570E8835D466",
"versionEndExcluding": "13.1-55.34",
"versionStartIncluding": "12.1"
},
{
"criteria": "cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E814029-E1B3-48E7-847E-B5A522D06780",
"versionEndExcluding": "14.1-29.72",
"versionStartIncluding": "14.1"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secure@citrix.com"
}