Design/Logic Flaw

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22956

CVE-2021-22956 is an uncontrolled resource consumption vulnerability in Citrix ADC and related appliances that can be triggered by an attacker with management-interface access (NSIP/SNIP) to cause a temporary disruption of the Management GUI, Nitro API, and RPC communications. The issue affects m...

CVE-2021-22955

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22955

CVE-2021-22955 is an unauthenticated DoS vulnerability affecting Citrix ADC and Citrix Gateway (and relatedly Citrix SD-WAN WANOP in related CVE-2021-22956) when appliances are configured as a VPN/Gateway or AAA virtual server. Affected versions include 13.0 before 83.27, 12.1 before 63.22, 11.1 ...

Citrix NITRO API Settings

Binary data citrixapplicationdeliverysettings.nbin...

How to add text message on Gateway logon page that AAA authentication enabled.

In AAA authentication profiled configured Gateway Virtual server, you may found the rewrite policy method to addsome texts on Netscaler Gateway logon page is no longer effective. This is because the portal layout mechanism is changed compared with basic authentication policy scenario. Before we g...

Storefront upgrade error : 'Storefront cannot be upgraded because the following folders are in use by another program'

Storefront cannot be upgraded because the following folders are in use by another program. Close the program and try again: C:\inetpub\wwwroot\Citrix\apps\AppData C:\inetpub\wwwroot\Citrix\appsAuth...

FBI issues flash alert after APT groups exploited VPN flaws

By Waqas With this; FatPipe joins the list of VPN providers that have faced a similar situation in the past, including Fortinet, Cisco, Pulse Secure, and Citrix. This is a post from HackRead.com Read the original post: FBI issues flash alert after APT groups exploited VPN flaws...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 1

Package name:xms10.14.0.10118.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces:None Date: November 2021 Languages supported:English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you hav...

Citrix Provisioning Services - Console Error During "Show Connected Devices"

While using the PVS console and right clicking on a PVS Server node to "show connected devices" or by right clicking on the vDisk and choosing "show usage" the console has been known to crash and not display the requested information. You may be presented with an error that the maximum size quota...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX330728)

The remote Citrix ADC or Citrix NetScaler Gateway device is version 11.1.x prior to 11.1-65.23, 12.1.x prior to 12.1-63.22, 12.1-FIPS prior to 12.1-55.257, 13.0.x prior to 13.0-83.27, or 13.1.x prior to 13.1-4.43. It is, therefore, affected by multiple vulnerabilities: - Unauthenticated denial of...

The vulnerability of the corporate application store server, Citrix StoreFront, allows attackers to perform XXE attacks.

The vulnerability of the corporate application store server Citrix StoreFront is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

Configuring Citrix SSO on Citrix Gateway for Citrix Endpoint Management

Configuring Citrix SSO on Citrix Gateway for Citrix Endpoint Management For details on how to configure Citrix SSO device policies to achieve per app VPN, please check the below document https://docs.citrix.com/en-us/citrix-endpoint-management/policies/vpn-policy.html This support article covers...

Microsoft Security Update Validation Report November 2021

Microsoft’s November 2021 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Citrix Workspace app for Windows fails with "Your Apps are not Available at this Time"

Configurations for Citrix Workspace app for Windows and SSON apply correctly to registry, but on intiial logon attempt, user receives the error "Your apps are not available at this time."...

Citrix Workspace App: "An account is not configured. Please contact your administrator."

User sees a dialog box from Citrix Workspace: An account is not configured. Please contact your administrator...

Critical Citrix DDoS Bug Shuts Down Network, Cloud App Access

A critical security bug in the Citrix Application Delivery Controller ADC and Citrix Gateway could allow cyberattackers to crash entire corporate networks without needing to authenticate. The two affected Citrix products formerly the NetScaler ADC and Gateway are used for application-aware traffi...

Microsoft Teams calls do not connect with older versions of Citrix Workspace app for Chrome OS

Users who meet all 3 below conditions use versions of the Citrix Workspace app for Chrome OS 2110 and older update to Chrome OS Version 96 and above, AND have enabled Microsoft Teams optimization will see screen sharing/joining meetings/calls not connecting from Microsoft Teams within virtual...

Citrix Systems Application Delivery Management 资源管理错误漏洞

Citrix Systems Application Delivery Management ADM is an application delivery management system from Citrix Systems. The system provides features such as centralized network and application management. A resource management error vulnerability exists in Citrix Systems Application Delivery...