Citrix Workspace App for Windows Privilege Escalation (CTX678036)

The version of Citrix Workspace installed on the remote host is prior to 2203.1 LTSR CU6 Hotfix 2, 2402 LTSR or 2403.1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the CTX678036 advisory. - Local Privilege escalation allows a low-privileged user to gain...

Performance issues with Intel GPUs and Citrix Workspace App

Customers using the Citrix Workspace App with Intel Arc GPUs and Intel GPU driver version 4824 could experience performance issues and lag The performance issues are present in Intel Arc A-series GPUs and Intel Core Ultra with built-in Arc GPUs, for example: Intel Arc A-Series Graphics Intel Arc...

Fortinet SSL VPN Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforce Login Utility', 'Description' = % This module scans for Fortinet SSL VPN web login portals and performs login brute...

Citrix Workspace App for IOS version 24.8.0 is crashing for users using MicroVPN

Post autoupdate of CWA for IOS 24.8.0, IOS user experiences CWA crash Issue is affecting customers with MicroVPN enabled...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for vulnerability impact...

Workspace App for Windows shows "Fatal error during installation" while launching applications.

Note: this article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149 for more information. After an .ica file has been downloaded during a launch attempt from browser, the following...

Slackware: Security Advisory (SSA:2024-240-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 plasma-workspace Vulnerability (SSA:2024-240-02)

The version of plasma-workspace installed on the remote host is prior to 5.23.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-240-02 advisory. New plasma-workspace packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding...

[slackware-security] plasma-workspace

New plasma-workspace packages are available for Slackware 15.0 to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/plasma-workspace-5.23.5-i586-4slack15.0.txz: Rebuilt. This update patches a security issue: ksmserver: Unauthorized users can access...

Citrix Workspace App for HTML5 GACS Bypass

The vulnerability of the Citrix Workspace App for HTML5 is related to incorrect default permissions. Exploiting this vulnerability could allow a malicious actor to bypass the configuration parameters of the GACS Global App Configuration service...

Citrix Workspace App Privilege Escalation

The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...

CWA for Android: Mobile Devices are not able to see the resources

Mobile Devices are not able to see the resources User may see Spinning wheel on Android device after adding Storefront URL in Workspace App...

Security update for plasma5-workspace (moderate)

openSUSE Security Update: Security update for plasma5-workspace Announcement ID: openSUSE-SU-2024:0161-1 Rating: moderate References: 1225774 1226110 Cross-References: CVE-2024-36041 CVSS scores: CVE-2024-36041 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE...

Citrix Workspace App for HTML5 URL Redirection

The vulnerability of the Citrix Workspace App for HTML5 relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...

How to Automate the Hardest Parts of Employee Offboarding

According to recent research on employee offboarding, 70% of IT professionals say they've experienced the negative effects of incomplete IT offboarding, whether in the form of a security incident tied to an account that wasn't deprovisioned, a surprise bill for resources that aren't in use anymor...

Citrix Workspace for Mac does not function with background elements are disabled.

Citrix Workspace App for Mac may not function as expected if background elements are disabled. The following errors may be encountered: Users may not be able to add an account. Users may not be able to log in to the Citrix Workspace app. CWA for Mac auto-update may fail Users may encounter...

GO-2024-2999 Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker

Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker...

A week in security (July 29 – August 4)

Last week on Malwarebytes Labs: Threat actor impersonates Google via fake ad for Authenticator Scammers are impersonating cryptocurrency exchanges, FBI warns Meta to pay $1.4 billion over unauthorized facial recognition image capture Apple fixes Siri vulnerabilities that could have allowed...

OESA-2024-1937 plasma-workspace security update

Plasma 5 libraries and runtime components Security Fixes: KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to...

Netflix Dispatch security vulnerability

Netflix Dispatch is a US-based Netflix software that provides deep integration with Slack, GSuite, Jira and other tools and provides security event management. Netflix Dispatch suffers from a security vulnerability that stems from allowing code to be executed within blocks that have not been...