Intermittent Session Launch Failure with Active/Active StoreFront Server Groups

Users intermittently fail to receive ICA files from StoreFront when trying to launch a new session in the following circumstances all of the below conditions must apply: Multiple active StoreFront server groups are in use, connected by GSLB, configured either for direct access or authentication...

[Citrix ADC] How to change password for local user

This article describes the method to change password of local user on Citrix ADC...

Citrix Releases Security Updates for Hypervisor

Citrix has released security updates to address vulnerabilities that could affect Hypervisor. An attacker could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Citrix Security Update CTX460064 and apply the necessary...

Citrix Hypervisor Security Update

A security issue has been identified in Citrix Hypervisor 7.1 LTSR CU2 that may allow privileged code in a PV guest VM to compromise the host. Citrix believes that there would be significant complexity in performing this attack in Citrix Hypervisor. The issue has the following CVE identifier:...

[Citrix Gateway] "Cannot complete your request" error after adding EPA configuration

In Citrix Gateway deployment, You may encounter "Cannot complete your request" error if adding a new EPA policy in AAA vServer. For example, you have the following existing configuration to implement post EPA scan based on group name: add authentication Policy NoAuthGroup01 -rule...

Alt + PrtSc shortcut not working when using KeyboardEventMode = Unicode with a Japanese keyboard

In Citrix Workspace App for Linux, when using Unicode keyboard event mode with a Japanese keyboard, the Alt + PrtSc combination/shortcut does not work...

MAL-2022-1908 Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in citrix-translate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5b966bf393cddd7def451e506d43725d5dfeac8bbd9d433f1e618a3422a1a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CWA 1912 CU4 : USB component fails during installation

Citrix workspace is packaged and installation command is added - CitrixWorkspaceAppweb.exe" /SILENT /Noreboot ADDLOCAL="ReceiverInside,ICAClient,DesktopViewer,Flash,Vd3d,SSON,USB,AM,SELFSERVICE" /INCLUDESSON ENABLESSON=Yes DONOTSTARTCC=1 /ENABLECEIP=False ALLOWADDSTORE=Y...

PVS Wizard fails to connect to Cloud

In the process of using a PVS Wizard, after entering your credentials to connect to Citrix Cloud, you might see this error: "Cannot connect to the Citrix Virtual Desktops Controller at : Citrix Virtual Desktops FullAdmin or MachineAdmin permission required." Following the below steps 1. If Remote...

Microsoft Security Update Validation Report June 2022

Microsoft’s June 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

CVE-2022-27511: Citrix ADM Remote Device Takeover

On Monday, June 14, 2022, Citrix published an advisory on CVE-2022-27511, a critical improper access control vulnerability affecting their Application Delivery Management ADM product. A remote, unauthenticated attacker can leverage CVE-2022-27511 to reset administrator credentials to the default...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

Design/Logic Flaw

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512 Temporary disruption of the ADM license service

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512

CVE-2022-27512 affects Citrix Application Delivery Management (ADM) server/agents (Citrix ADM 13.0 and 13.1). Root cause is a vulnerable FLEXlm license-manager implementation, enabling a remote attacker to disrupt the licensing service and block issuance/renewal of licenses, effectively a licensi...

Unauthenticated remote user can reset administrator password in Citrix ADM

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary An unauthorized remote user can corrupt the system which can lead to an administrator password reset to default on the next reboot...

Citrix ADM 13.0.x < 13.0.85.19 / 13.1.x < 13.1.21.53 Multiple Vulnerabilities (CTX460016)

Multiple vulnerabilities exist in Citrix Application Delivery Management ADM 13.0 prior to 13.0-85.19 and 13.1 prior to 13.1-21.53. An unauthenticated, remote attacker can exploit this to reset the administrator password and gain administrative access to the appliance. Note that Nessus has not...

Citrix Application Delivery Management 安全漏洞

Citrix Application Delivery Management ADM is an application delivery management system from Citrix. The system provides centralized network and application management functions. A security vulnerability exists in Citrix Application Delivery Management that originates from allowing an...