CVE-2024-12284 - Vulnerability Details - OpenCVE

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US

History

Thu, 20 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 19 Feb 2025 23:45:00 +0000

Type	Values Removed	Values Added
Description		Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
Title		Authenticated privilege escalation
Weaknesses		CWE-269
References		https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US
Metrics		cvssV4_0 `{'score': 8.8, 'vector': 'CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}`

MITRE

Status: PUBLISHED

Assigner: Citrix

Published: 2025-02-19T23:30:11.146Z

Updated: 2025-02-21T04:56:13.966Z

Reserved: 2024-12-05T20:44:23.593Z

Link: CVE-2024-12284

Vulnrichment

Updated: 2025-02-20T17:24:27.297Z

NVD

Status : Received

Published: 2025-02-20T00:15:19.360

Modified: 2025-02-20T00:15:19.360

Link: CVE-2024-12284

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-12284", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "state": "PUBLISHED", "assignerShortName": "Citrix", "dateReserved": "2024-12-05T20:44:23.593Z", "datePublished": "2025-02-19T23:30:11.146Z", "dateUpdated": "2025-02-21T04:56:13.966Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Console", "vendor": "NetScaler", "versions": [{"lessThan": "38.53", "status": "affected", "version": "14.1", "versionType": "patch"}, {"lessThan": "56.18", "status": "affected", "version": "13.1", "versionType": "patch"}]}, {"defaultStatus": "unaffected", "product": "Agent", "vendor": "NetScaler", "versions": [{"lessThan": "38.53", "status": "affected", "version": "14.1", "versionType": "patch"}, {"lessThan": "56.18", "status": "affected", "version": "13.1", "versionType": "patch"}]}], "datePublic": "2025-02-18T23:27:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Authenticated privilege escalation in <span style=\"background-color: rgb(255, 255, 255);\">NetScaler Console and NetScaler Agen</span>t allows."}], "value": "Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 8.8, "baseSeverity": "HIGH", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-02-19T23:30:22.357Z"}, "references": [{"url": "https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US"}], "source": {"discovery": "UNKNOWN"}, "title": "Authenticated privilege escalation", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-20T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-12284"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-21T04:56:13.966Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-12284", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-20T17:24:21.739016Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-20T17:24:27.297Z"}}], "cna": {"title": "Authenticated privilege escalation", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "NetScaler", "product": "Console", "versions": [{"status": "affected", "version": "14.1", "lessThan": "38.53", "versionType": "patch"}, {"status": "affected", "version": "13.1", "lessThan": "56.18", "versionType": "patch"}], "defaultStatus": "unaffected"}, {"vendor": "NetScaler", "product": "Agent", "versions": [{"status": "affected", "version": "14.1", "lessThan": "38.53", "versionType": "patch"}, {"status": "affected", "version": "13.1", "lessThan": "56.18", "versionType": "patch"}], "defaultStatus": "unaffected"}], "datePublic": "2025-02-18T23:27:00.000Z", "references": [{"url": "https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows.", "supportingMedia": [{"type": "text/html", "value": "Authenticated privilege escalation in <span style=\"background-color: rgb(255, 255, 255);\">NetScaler Console and NetScaler Agen</span>t allows.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "shortName": "Citrix", "dateUpdated": "2025-02-19T23:30:22.357Z"}}}, "cveMetadata": {"cveId": "CVE-2024-12284", "state": "PUBLISHED", "dateUpdated": "2025-02-20T17:24:31.172Z", "dateReserved": "2024-12-05T20:44:23.593Z", "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6", "datePublished": "2025-02-19T23:30:11.146Z", "assignerShortName": "Citrix"}, "dataVersion": "5.1"}