Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 69. Vulnerability Details CVEID: CVE-2021-23343 DESCRIPTION: path-parse is vulnerable t...

Slack: [Android] Directory traversal leading to disclosure of auth tokens

Files uploaded to and opened in Slack with specially-crafted names could cause the Android operating system to overwrite configuration files on customer devices, potentially exposing Slack data to attacker-controlled websites. In order to take advantage of this vulnerability, attackers needed to ...

User stays logged into Citrix Workspace for more than a day

When a user uses Citrix Workspace app to log into a Citrix Workspace store, user remains logged in for more than a day without having to re-enter their password...

'/;/WEB-INF/' Information Disclosure Vulnerability (HTTP)

Various application or web servers / products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Citrix Workspace App Access Control RCE

The vulnerability of the Citrix Workspace App is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 68. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: Apache Commons Beanutils...

Launching multiple virtual apps and desktops using Citrix Workspace App for Mac is failing on macOS 11.6

Apple has released a new version of macOS Big Sur 11.6. Launching multiple virtual apps and virtual desktops using Citrix Workspace App for Mac is failing on this version of macOS. Note : Launching just one virtual app or virtual desktop using Citrix Workspace App for Mac should work fine on macO...

CVE-2021-40357

A vulnerability has been identified in Teamcenter Active Workspace V4.3 All versions V4.3.10, Teamcenter Active Workspace V5.0 All versions V5.0.8, Teamcenter Active Workspace V5.1 All versions V5.1.5, Teamcenter Active Workspace V5.2 All versions V5.2.1. A path traversal vulnerability in the...

Path traversal

A vulnerability has been identified in Teamcenter Active Workspace V4.3 All versions V4.3.10, Teamcenter Active Workspace V5.0 All versions V5.0.8, Teamcenter Active Workspace V5.1 All versions V5.1.5, Teamcenter Active Workspace V5.2 All versions V5.2.1. A path traversal vulnerability in the...

CVE-2021-40357

A vulnerability has been identified in Teamcenter Active Workspace V4.3 All versions V4.3.10, Teamcenter Active Workspace V5.0 All versions V5.0.8, Teamcenter Active Workspace V5.1 All versions V5.1.5, Teamcenter Active Workspace V5.2 All versions V5.2.1. A path traversal vulnerability in the...

CVE-2021-40357

CVE-2021-40357 affects Siemens Teamcenter Active Workspace: v4.3 (all versions before 4.3.10), v5.0 (before 5.0.8), v5.1 (before 5.1.5), and v5.2 (before 5.2.1). The flaw is a path traversal vulnerability (CWE-22) that could allow an attacker to bypass restrictions and access other services withi...

Siemens Teamcenter Active Workspace 路径遍历漏洞

Siemens Teamcenter Active Workspace is a web application for accessing the Teamcenter system, providing the same and seamless experience on any computer or smart device. A path traversal vulnerability exists in Siemens Teamcenter Active Workspace. An attacker could exploit the vulnerability to...

CVE-2021-40357: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been identified in Teamcenter Active Workspace V4.3 All versions V4.3.10, Teamcenter Active Workspace V5.0 All versions V5.0.8, Teamcenter Active Workspace V5.1 All versions V5.1.5, Teamcenter Active Workspace V5.2 All versions V5.2.1. A path traversal vulnerability in the...

PT-2021-22875

Name of the Vulnerable Software and Affected Versions Teamcenter Active Workspace versions prior to V4.3.10 Teamcenter Active Workspace versions prior to V5.0.8 Teamcenter Active Workspace versions prior to V5.1.5 Teamcenter Active Workspace versions prior to V5.2.1 Description A path traversal...

Siemens Teamcenter Active Workspace

1. EXECUTIVE SUMMARY CVSS v3 4.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Active Workspace Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to access control violations. 3. TECHNICAL...

MDM Profile on iOS 15/iPadOS 15 and macOS 12 devices shows as “Not Verified” or “Unverified”

Currentenrolleddevices that were upgraded from iOS 14/iPadOS14 or earlierto iOS/iPadOS15ornewly enrolled devices on iOS/iPadOS15may show “Not Verified” under the device“Settings General VPN & deviceManagementCitrix Workspace MDM Profile” Currentenrolled devices that were upgraded from macOS 11or...

"KeyboardLayout=(Server Default)" cannot take effect on Citrix Workspace app for Linux

Use the following way to change the Keyboard Layout sync mode to Server Default. Configure in StoreFront File Path:C:\inetpub\wwwroot\Citrix%StoreName%\AppData\default.ica Change setting inWFClient:KeyboardLayout=Server Default Or configure in CWA for Linux File path:/.ICAClient/wfclient.ini...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The unofficial MATLAB extension for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

CVE-2021-36235

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges...

CVE-2021-36235

An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges...