Users Prompted for Credentials on Workspace URLs When Using Federated Authentication Providers

Overview: Users may be prompted for additional authentication when navigating to Citrix Workspace URLS if Workspace is configured to use a federated identity provider. Example: Users may be prompted for Azure AD credentials when Using AAD for Authentication to Citrix Workspace, even if the user h...

How to troubleshoot maintenance upgrade failures on Citrix Cloud Connector for Windows

This article describes how to troubleshoot maintenance upgrade failures on Citrix Cloud Connector for Windows...

Citrix Workspace app for macOS and Retina displays

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. What’s changed? We have optimized Citrix workspace app for macOS and retina displays within virtual...

Receiving "Legacy System Extension" Dialog Box After Upgrading To macOS Catalina 10.15.4+

After upgrading macOS to Catalina 10.15.4, a dialog box will prompt the end user with the following message: Existing software on your system loaded a system extension signed by "Citrix Systems, Inc." which will be incompatible with a future version of macOS. Contact the developer for support...

Citrix Gateway VPN client Registry keys and its Values

Click on the following link to access the Citrix Gateway VPN client Registry keys, values and its description: Citrix Gateway VPN client registry keys...

Citrix XenMobile XML External Entity Injection (CVE-2018-10653)

An XML External Entity Injection vulnerability exists in Citrix XenMobile Server. Successful exploitation of this vulnerability could result in unauthorized access to critical data in Citrix XenMobile Server...

Security Bulletin: IBM MegaRAID Storage Manager is affected by a vulnerability in TLS (CVE-2019-6485)

Summary The following vulnerability in TLS has been addressed by IBM MegaRAID Storage Manager. Vulnerability Details CVEID: CVE-2019-6485 DESCRIPTION: Citrix NetScaler Application Delivery Controller and NetScaler Gateway could allow a remote attacker to obtain sensitive information, caused by a...

Exploit for Path Traversal in Citrix Application_Delivery_Controller_Firmware

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781...

Citrix Workspace App for Windows Remote Code Execution Vulnerability (CTX251986)

The version of Citrix Workspace installed on the remote host is affected by a remote code execution vulnerability due to incorrect access control. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands on the remote host. C Tenable Network...

Citrix Gateway Cache Bypass (CVE-2020-10111)

A cache bypass vulnerability exists in Citrix Gateway. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

HP ThinPro 6.x / 7.x Citrix Command Injection Vulnerability

HP ThinPro - Citrix command injection =============================================================================== Identifiers ------------------------------------------------- CVE-2019-18909 CVSSv3 score ------------------------------------------------- 6.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign

Researchers warn that APT41, a notorious China-linked threat group, has targeted more than 75 organizations worldwide in “one of the broadest campaigns by a Chinese cyber-espionage actor observed in recent years.” Between Jan. 20 and March 11, researchers observed APT41 exploiting vulnerabilities...

This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits

Beginning this year, FireEye observed Chinese actor APT41 carry out one of the broadest campaigns by a Chinese cyber espionage actor we have observed in recent years. Between January 20 and March 11, FireEye observed APT41 attempt to exploit vulnerabilities in Citrix NetScaler/ADC, Cisco routers,...

HP ThinPro 6.x / 7.x Citrix Command Injection

HP ThinPro - Citrix command injection =============================================================================== Identifiers ------------------------------------------------- CVE-2019-18909 CVSSv3 score ------------------------------------------------- 6.1 AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

Windows 10 start menu modern apps are missing after log off

The TileDataLayer model %LOCALAPPDATA%\TileDataLayer\Database that worked on previous versions of Windows 10 has been removed from fall creator v1709 and our current Citrix User Profile Manager customization to make Start screen/Modern Apps work are no longer applicable...

Exclusion of Citrix embedded browser from the Citrix Workspace app 1912 LTSR for Windows

The Citrix Workspace app Long Term Service Release LTSR is released on a less frequent cadence with an extended lifecycle than the Workspace app Current Releases CR, offering predictability and less changes to the product. The Citrix Workspace app LTSR offers Cumulative Updates CU that contain...

Changes to Citrix Insight Services (CIS) and Customer Uploads

On March 18, 2020 we had a service disruption with Citrix Insight Services CIS platform which hosted the customer portal at cis.citrix.com, along with Call home, CEIP and few other services. Over the last few days, we have been in the process of bringing up most of the affected services and also...

Citrix Gateway Service – Points-of-Presence (PoPs)

In order to ensure business continuity and assure quality of service for customers using Citrix Gateway service for HDX proxy, we are expanding the number of PoPs available globally. This change impacts Citrix Workspace and Citrix Virtual Apps & Desktops service customers. Customers may see netwo...

Support for Citrix ADC on Azure – Subscription license with hourly price

Citrix provides support for Citrix ADC Subscription based offering subscription license with hourly price on Azure. For builds greater than or equal to Build 13.0.67.43 To file a support case, you need to present support PIN code of Citrix ADC subscription based offering that you have deployed on...

Slowness in Presenting Citrix Gateway/AAA Login page on Client Browsers

Sometimes Citrix Gateway login page takes a long time to be presented on the client’s browsers. When this issue occurs, you might observe any of the following conditions. The number of established connections to Apache counter has hit the default configured limit of 30 or a customized value, if...