Privilege escalation to NetworkService Account access

An authenticated user in the same Windows Active Directory domain can escalate their privileges to gain NetworkService Account access in Citrix Session Recording. This allows them to perform actions with higher permissions than their account normally allows.

CWE-269 (Improper Access Control) vulnerability enabling privilege escalation to NetworkService Account in Citrix Session Recording. Attack vector requires authentication within the same AD domain as the recording server; successful exploitation grants elevated permissions equivalent to the NetworkService system account, potentially allowing unauthorized access to recorded session data and system resources.