80 matches found
Citrix Secure Access for Windows fails to allow traffic through VPN after an upgrade to 23.x.x.x
After a successful connection to the Citrix Secure Access CSA client in full tunnel, none of the traffic passes through the VPN. Access to the applications using an IP address or DNS over the tunnel is blocked. The issue is limited to domain-joined machines where the Intranet IP address is...
The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access (formerly Citrix Gateway), is related to improper code generation. This allows a malicious individual to execute arbitrary code.
The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access formerly Citrix Gateway, is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user navigate to a...
How to capture and collect logs Citrix Secure Access VPN Plug-in on Windows.
Allow the capture of VPN Plug-In Citrix Secure Access debugging logs for 13.1 and higher builds...
CVE-2023-24491
A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...
CVE-2023-24492
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...
CVE-2023-24492
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...
CVE-2023-24492
The CVE-2023-24492 issue affects the Citrix Secure Access client for Ubuntu. A remote attacker can achieve code execution if a vulnerable user opens an attacker-crafted link and accepts subsequent prompts. Affected versions are prior to 23.5.2; mitigation is to update to 23.5.2 or later as indica...
CVE-2023-24491
A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...
Citrix Secure Access client for Windows Security Bulletin for CVE-2023-24491
A vulnerability has been discovered in the Citrix Secure Access client for Windows. The following supported versions are affected by the vulnerability: Versions before 23.5.1.3 The issue has the following identifier:...
Citrix Systems Secure Access 代码注入漏洞
Citrix Systems Secure Access is a secure access solution from Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Secure Access versions prior to 23.5.1.3, which can be exploited by an attacker to remotely execute code if the victim user opens a link crafted by the attacker and...
CVE-2023-24491: Improper Privilege Management
A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...
PT-2023-3491 · Citrix · Citrix Secure Access +1
Name of the Vulnerable Software and Affected Versions: Citrix Secure Access formerly Citrix Gateway versions affected versions not specified Citrix Secure Access client for Ubuntu affected versions not specified Description: The issue is related to incorrect code generation management in the acce...
PT-2023-3995 · Citrix · Citrix Secure Access Client For Windows
Name of the Vulnerable Software and Affected Versions: Citrix Secure Access client for Windows affected versions not specified Description: A vulnerability has been discovered in the Citrix Secure Access client for Windows, which, if exploited, could allow an attacker with access to an endpoint...
Citrix Systems Secure Access 安全漏洞
Citrix Systems Secure Access is a secure access solution from Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Secure Access versions prior to 23.5.1.3 that originates from the installation of a standard user account access endpoint from a vulnerable client that can escalate...
CVE-2023-24492: Improper Control of Generation of Code
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...
Citrix Secure Access setup failed in Windows11 (ARM64 based)
CitrixSecure Accesssetup failed in Windows11 ARM64 based with the below error "Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network ConfigurationOperators group......"...
DNS resolution issue with new 13.0.86.17 client
ADC version 13.0.86.17, with 'Citrix Secure Access' VPN client the same version, shows as version 22.2.1.103 in the client. The old client was 13.0.58.30 shown as 21.3.1.2 1. Some users report that on the new client they cannot resolve any DNS record...
CVE-2022-21827
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows Citrix Secure Access for Windows 21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM...
Allow Citrix Secure Access app for macOS to access device certificate without asking for system credentials every time
If device certificate check has been configured on ADC, then the client app Citrix Secure Access must provide the device certificate present in the Mac’s Keychain. Since the certificate is placed in “System Keychain”, macOS might prompt for system credentials every time the user logs on. To avoid...
