{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T03:56:35.399","vulnerabilities":[{"cve":{"id":"CVE-2024-8535","sourceIdentifier":"secure@citrix.com","published":"2024-11-12T19:15:19.040","lastModified":"2026-06-17T08:22:48.703","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver)  with KCDAccount configuration for Kerberos SSO to access backend resources"},{"lang":"es","value":"El usuario autenticado puede acceder a las capacidades de usuario no deseadas en NetScaler ADC y NetScaler Gateway si el dispositivo debe configurarse como un Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend O el dispositivo debe configurarse como un servidor de autenticación (AAA Vserver) con configuración de KCDAccount para Kerberos SSO para acceder a los recursos del backend "}],"affected":[{"source":"secure@citrix.com","affectedData":[{"vendor":"NetScaler","product":"NetScaler ADC","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1 FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]},{"vendor":"NetScaler","product":"NetScaler Gateway","defaultStatus":"unaffected","versions":[{"version":"14.1","lessThan":"29.72","versionType":"patch","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"patch","status":"affected"},{"version":"13.1-FIPS","lessThan":"37.207","versionType":"patch","status":"affected"},{"version":"12.1-FIPS","lessThan":"55.321","versionType":"patch","status":"affected"},{"version":"12.1-NDcPP","lessThan":"55.321","versionType":"patch","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"netscaler","product":"adc","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:adc:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"29.72","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"custom","status":"affected"},{"version":"13.1fips","lessThan":"37.207","versionType":"custom","status":"affected"},{"version":"12.1-fips","lessThan":"55.321","versionType":"custom","status":"affected"},{"version":"12.1-ndcpp","lessThan":"55.321","versionType":"custom","status":"affected"}]},{"vendor":"netscaler","product":"gateway","defaultStatus":"unknown","cpes":["cpe:2.3:a:netscaler:gateway:*:*:*:*:*:*:*:*"],"versions":[{"version":"14.1","lessThan":"29.72","versionType":"custom","status":"affected"},{"version":"13.1","lessThan":"55.34","versionType":"custom","status":"affected"},{"version":"13.1fips","lessThan":"37.207","versionType":"custom","status":"affected"},{"version":"12.1-fips","lessThan":"55.321","versionType":"custom","status":"affected"},{"version":"12.1-ndcpp","lessThan":"55.321","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"secure@citrix.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-13T20:05:08.852710Z","id":"CVE-2024-8535","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-552"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"F5EE3463-C7DB-493D-A14E-7A8891B903D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"12.1-55.321","matchCriteriaId":"1EAF1004-344C-4A0A-A1B6-A8932D763724"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"0F832616-B768-4B98-AF21-3C32CB1F9A3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*","versionStartIncluding":"13.1","versionEndExcluding":"13.1-37.207","matchCriteriaId":"23A038D6-AA3B-4833-AEE8-0DCE05DC21E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"29410A07-D4E1-4D0F-BC78-4A2323325370"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"12.1","versionEndExcluding":"13.1-55.34","matchCriteriaId":"B767B864-9D9B-4C28-A216-570E8835D466"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1","versionEndExcluding":"14.1-29.72","matchCriteriaId":"3E814029-E1B3-48E7-847E-B5A522D06780"}]}]}],"references":[{"url":"https://support.citrix.com/s/article/CTX691608-netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20248534-and-cve20248535?language=en_US","source":"secure@citrix.com","tags":["Vendor Advisory"]}]}}]}