CVE-2020-10110

Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end...

CVE-2020-10110

Citrix Gateway versions 11.1, 12.0 and 12.1 are referenced as affected by an Information Exposure Through Caching issue. The Red Hat/CVE and other connected records describe the vulnerability as exposure via cache headers, specifically the Via and Age headers, used in proxy caching, with Citrix d...

CVE-2020-10110

Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The "Via" header lists cache protocols and recipients between the start and end...

PT-2020-11933 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue concerns an Inconsistent Interpretation of HTTP Requests. It is noted that Citrix disputes the reported behavior as not a security issue, stating that Citrix ADC only caches...

PT-2020-11934 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue allows Cache Poisoning. By default, Citrix ADC only caches static content served under certain URL paths for Citrix Gateway usage. No dynamic content is served under these paths...

PT-2020-11932 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue allows Information Exposure Through Caching. The Via header lists cache protocols and recipients between the start and end points for a request or a response. The Age header...

HDX session may stop responding and hang if endpoint device has unusable printer

Citrix HDX session may stop responding and hang if endpoint device has unusable printer...

Citrix App Layering - Error while trying to import layers

While trying to import layers, App Layering console displays an error: "An unexpected exception occurred. If this problem continues, contact Technical Support and provide them with the details of this exception". Looking at the ELM Web logs, we might see the below errors: ERROR 2832HandlerHelper:...

SmartCard device is disconnected from ICA after 60s .Users smart card connection is timed out while renewing the certificates on Smart card

When users are using SmartCard device to Launch Desktop or Application, the have noticed that after logging to ICA session Citrix Virtual Apps & desktops version 7.15 CU2 LTSR on Windows Server 2016 all user's certificates checked with special application. If a certificate is not valid/expired,...

Citrix VDI Desktop Viewer 'No Device' for USB

When using Citrix XenDesktop 7.5 for VDI and Windows7 physical machine and connect to VDI Win7 PC the user attempts to use the Desktop Viewer bar and select 'Devices'. This says 'No Devices' and it doesn't see any USB devices. A thin client which the same Citrix Policies apply to and this works...

Citrix Receiver Error: "Check network connections" When iPad Goes into Sleep Mode

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After unlocking the iPad the Citrix Receiver Shows the following message: Connection not possible...

Hackers Were Inside Citrix for Five Months

Networking software giant Citrix Systems says malicious hackers were inside its networks for five months between 2018 and 2019, making off with personal and financial data on company employees, contractors, interns, job candidates and their dependents. The disclosure comes almost a year after...

Citrix Gateway Native OTP not working with Citrix IOS Workspace Client

1. Native OTP configuration done as per https://docs.citrix.com/en-us/netscaler-gateway/12/native-otp-support.html 2. Android / Windows Workspace Clients and Browser work able to authenticate, enumerate and launch APPs 3. IOS Workspace Client is unable to authenticate, if user enters the...

Storefront install error 0x00000643 when upgrading to 7.15 CU3

Error upgrading Storefront 7.15 CU2 to CU3. Error in log Failed to install component 'StoreFront'. 'CitrixStoreFront-x64.exe' component failed to install with error 0x00000643...

Logon/Logoff Issues with Citrix Profile Management and Opportunistic Locks (OpLocks)

Slow Logon's Slow Logoff's Sessions never logoff until the Lock is removed Sessions never logon until the Lock is removed Temporary Profiles...

Citrix Director displays multiple Hypervisor health alerts

Background Citrix Director displays alerts on the dashboard and other high level views to monitor infrastructure. Alerts from various hypervisors including XenServer and vSphere, help monitor the hypervisor parameters and states. Starting with CVAD 2411, Citrix Director introduces bulk dismissal ...

When Launching Published Applications via Citrix Storefront Receiving Error "Cannot connect to server, Please check your network and try again."

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After Storefront branding customization, users that are accessing applications from the receiver are...

LDAP Windows Update (ADV190023) and Impact to Citrix Virtual Apps and Desktop Components

Impact to Citrix Technology This update will not impact Citrix Virtual App and Desktop Windows components: The update anticipated for the second half of 2020 requires SSL/TLS encryption for communication occurring over 389 and 636 to prevent any PLAINTEXT communication over both ports. Virtual Ap...

Critical Citrix RCE Flaw Still Threatens 1,000s of Corporate LANs

About one in five of the 80,000 companies affected by a critical bug in the Citrix Application Delivery Controller ADC and Citrix Gateway are still at risk from a trivial attack on their internal operations. If exploited, the flaw could allow unauthenticated attackers to gain remote access to a...

Citrix ADM Ports and URL's That Need To Be Opened for Communication

Additional notes: If using ULFD LogStream: The -logstreamOverNSIP option is available from Citrix ADC 13.0 41.x and 12.1 55.x onwards to alter the SRC IP. Default is SNIP. This is a global setting. set appflow param -logstreamOverNSIP If using IPFix AppFlow: The -IPAddress parameter can be used t...