Security researchers at watchTowr discovered the flaw and claim attackers can gain access without authentication, a finding which Citrix disputes.
First seen on cybersecuritydive.com
Jump to article: www.cybersecuritydive.com/news/citrix-session-recording-cves-hackers/732794/