CVE-2020-8207: Improper Access Control

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

Citrix Systems Workspace App Access Control Error Vulnerability (CNVD-2020-42654)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in the automatic update service in the Citrix Systems Workspace App Windows 1912 LTSR a...

Fixed vulnerability in Citrix Workspace (formerly Citrix Receiver)

A vulnerability has been fixed in the automatic update service of the Citrix Workspace app for Windows that could result in increased user privileges. Citrix has made an update available to fix the vulnerability. fix. For more information, see the following page:...

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...

Android, Citrix Workspace App, Error 518

When launching an Application when account type added as "Web Interface" you mightreceive this error with an Android Device:...

Citrix Workspace App for Mac OSX UDP Audio redirection causing high CPU spikes for Citrix Viewer

Frequently CPU spikes while utilizing Citrix Workapce App for MAC OSX 2005 and audio over UDP...

Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session

Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session, comparing toCitrix Workspace app 1912 for Windows. In a Fiddler trace captured during session launch, you will see wfica32 attempting to connect tolocus.analytics.cloud.com:443 but failing...

Citrix workspace app | Uninstallation of CWA breaks ICA session

If we have VDAs with this order of installation CWA installed first and then the VDA. Now when wetryto uninstall or upgrade the CWA, some display drivers from thevda get removed, as a result the ICA session breaks and the only way to get it working again is to - reinstall the VDA reboot,...

Citrix Systems Workspace App Elevation of Privilege Vulnerability (CNVD-2020-35945)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows. A local attacker could exploit the...

Citrix Systems Workspace App Elevation of Privilege Vulnerability

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows that stems from the program assigning...

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13885

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

Path traversal

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

Design/Logic Flaw

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13885

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

PT-2020-13750

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1912 Description The issue is related to Insecure Permissions, which allows local users to gain privileges during the uninstallation of the application. Recommendations For versions prior to 1912, update ...

PT-2020-13749

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1912 Description The issue allows local users to gain privileges during the uninstallation of the application due to Insecure Permissions and an Unquoted Path vulnerability. Recommendations For versions...

CVE-2020-13884: Incorrect Default Permissions

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13885: Incorrect Default Permissions

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...