584 matches found
CVE-2022-37398
ASUSTOR Data Master (ADM) contains a stack-based buffer overflow in WebDAV when handling data size validation, affecting ADM versions 3.5.9.RUE3 and below, 4.0.5.RVI1 and below, and 4.1.0.RJD1 and below. The vulnerability could allow remote authenticated users to execute arbitrary code. Remediati...
How to add pooled capacity licenses to ADM Service
This article provides information on how to add pooled capacity licenses on ADM Service...
How to apply pooled licenses to Citrix ADM
This article contains information on how to apply pooled licenses to Citrix ADM...
CVE-2022-27511: Citrix ADM Remote Device Takeover
On Monday, June 14, 2022, Citrix published an advisory on CVE-2022-27511, a critical improper access control vulnerability affecting their Application Delivery Management ADM product. A remote, unauthenticated attacker can leverage CVE-2022-27511 to reset administrator credentials to the default...
CVE-2022-27512
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
Design/Logic Flaw
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
CVE-2022-27512
CVE-2022-27512 affects Citrix Application Delivery Management (ADM) server/agents (Citrix ADM 13.0 and 13.1). Root cause is a vulnerable FLEXlm license-manager implementation, enabling a remote attacker to disrupt the licensing service and block issuance/renewal of licenses, effectively a licensi...
CVE-2022-27512 Temporary disruption of the ADM license service
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
Unauthenticated remote user can reset administrator password in Citrix ADM
Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary An unauthorized remote user can corrupt the system which can lead to an administrator password reset to default on the next reboot...
Citrix ADM 13.0.x < 13.0.85.19 / 13.1.x < 13.1.21.53 Multiple Vulnerabilities (CTX460016)
Multiple vulnerabilities exist in Citrix Application Delivery Management ADM 13.0 prior to 13.0-85.19 and 13.1 prior to 13.1-21.53. An unauthenticated, remote attacker can exploit this to reset the administrator password and gain administrative access to the appliance. Note that Nessus has not...
su: nobody to pgxl in console
Citrix ADM instance constantly showing su: nobody to pgxl in console RCG-ISLBADM-PRI su: in promptechooff: tcgetarrt: Inappropriate ioctl for device RCG-ISLBADM su: nobody to pgxl...
Citrix-ADM using localhost IP 127.0.0.1 to send syslog traffic to Splunk server
Citrix-ADM 13.0 76.29 is noted to be using localhost IP to send Syslog traffic instead of ADM IP to external Syslog server. As a result, Citrix ADM is not able to send the Syslog traffic to Splunk server successfully as seen below. A tcpdump on Citrix ADM also shows traffic is generated and sent...
Getting error: Couldn't agree a key exchange algorithm when accessing ADM CLI
Getting error: Couldn't agree a key exchange algorithm when accessing the ADM CLI after upgrading to 13.0.64.35...
How to check ADM agent to endpoint connectivity issue
Issue : Getting the alert message as ADM agent is down. Tenant ID: XXXXXXX Agent IP: XXXXXXXX Agent Host Name: XXXXXXX Diagnostics Alert: • https://adm-prod-backup-XXXXXXX.s3.amazonaws.com not reachable...
CVE-2021-44620
A Command Injection vulnerability exits in TOTOLINK A3100R =V4.1.2cu.5050B20200504 in adm/ntm.asp via the hosTime parameters...
TotoLink A3100R 命令注入漏洞
Totolink A3100R is a series of wireless routers from Totolink China.A command injection vulnerability exists in Totolink A3100R V4.1.2cu.5050B20200504 and prior versions, which stems from a lack of filtering and escaping of command data in the hostTime parameter in adm/ntm.asp. escaping. An...
Citrix Systems Application Delivery Management 资源管理错误漏洞
Citrix Systems Application Delivery Management ADM is an application delivery management system from Citrix Systems. The system provides features such as centralized network and application management. A resource management error vulnerability exists in Citrix Systems Application Delivery...
Citrix ADM Authentication Bypass (CTX247738)
An information disclosure vulnerability exists in Citrix Application Delivery Management ADM. An unauthenticated, remote attacker can exploit this to disclose information could be used for privilege escalation beyond the agent system. Note that Nessus has not attempted to exploit these issues but...
Citrix ADM Authentication Bypass (CTX261735)
An authentication bypass vulnerability exists in Citrix Application Delivery Management ADM. An authenticated, remote attacker can exploit this, via the web management interface, to bypass authentication and gain administritive access to the appliance. Note that Nessus has not attempted to exploi...