CVE-2020-8283

CVE-2020-8283 affects Citrix Virtual Apps and Desktops (UPS on Windows) where an authenticated user on a Windows host running Universal Print Server can perform arbitrary command execution as SYSTEM. The issue is documented across sources (NVD entry and Red Hat advisory) and is tied to affected p...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

Citrix Virtual Apps and Desktops Licensing Issues Vulnerability

Citrix Systems Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops that originates from an authenticated user executi...

Vulnerabilities fixed in Citrix Secure Mail

Citrix has fixed vulnerabilities in Citrix Secure Mail. A malicious party can use a rogue app to gain access to the email data and, to a lesser extent, the calendar data stored in the victim's Citrix Secure Mail. The vulnerability is located in Citrix Secure Mail for Android. Citrix Secure Mail f...

Citrix Secure Mail for Android Security Update

Description of Problem Vulnerabilities have been discovered in CitrixSecure Mailfor Androidthatcould allowunauthorisedaccessto datawithinCitrix Secure Mail. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|--- CVE-2020-8274|...

How to collect logs for Citrix Workspace App for Windows

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes the steps for collecting logs and key data from Citrix Workspace app for Windows...

VulnCheck KEV: CVE-2019-12989

Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection...

VulnCheck KEV: CVE-2019-12991

Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance...

"You cannot logon to the specified server" error when login to Storefront server.

Only certain users cannot log on to storefront. Following events can be seen on the storefront server : Security events logs : Event 4625, Microsoft Window security auditing Failure Information : Failure Reason : User not allowed to logon at this computer. Status : 0xC000006E Citrix Delivery...

Citrix Workspace App for Android Facing Session Disconnection After Few Minutes of Inactivity

After few minutes of user session being inactive on CWA for Android, they see the below error: "We were unable to connect to the server. We were unable to tunnel through the proxy. " This can be seen about 3-4 minutes after the user device enter lock screen. The lock screen can happen either...

ADM - Failed to allocate requested capacity for MPX/SDX or VPX to create in SDX

When multiple pool of licenses Bandwidth/instance are purchased at different points in time, the Service agreement SA date and expiration date are different, causing each pool of licenses to be recognized as separate on Citrix ADM, instead of one combined pool of licenses. This sometimes may caus...

Vulnerability fixed in Citrix Hypervisor

A vulnerability has been fixed in Citrix Hypervisor. The vulnerability allows a malicious party capable of running code with elevated privileges on a guest VM able to execute execute arbitrary code with elevated privileges on the host. This vulnerability can only be exploited if a host...

Citrix Hypervisor Security Update

Description of Problem A security issue has been identified that may allow privileged code running in a guest VM to compromise the host. This issue is limited to only those guest VMs where the host administrator has explicitly assigned a PCI passthrough device to the guest VM. The issue has the...

Citrix XenMobile Server Directory Traversal (CVE-2020-8209)

A directory traversal vulnerability exists in Citrix XenMobile. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Updates to XenServer VM Tools for Windows - For XenServer and Citrix Hypervisor

Who Should Read This Article? This information is for customers using all supported version of XenServer and Citrix Hypervisor who have the XenServer VM Tools formerly Citrix VM Tools for Windows installed on their Windows VMs. Latest version The following version of XenServer VM Tools for Window...

Hotfix XS82E004 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Oct 13, 2020...

Hotfix XS81E001 - For Citrix Hypervisor 8.1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.1. Note : EnsurethatyouuseXenCenter8.1.2orlatertoinstallthishotfix.ThelatestversionofXenCenterisavailablefrom the CitrixHypervisorDownloadsite. Information About this Hotfix Component| Details ---|---...

Updates to XenVBD Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest version The following versions of XenVBD are the latest that are available through Windows Automatic...

Updates to XenBus Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest versions The following versions of XenBus are the latest that are available through Windows Automatic...

Hotfix XS80E004 - For Citrix Hypervisor 8.0

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.0. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart Host Content live patchable| Yes Baselines for Live Patch| XS80E003 Revision History| Published on A...