CVE-2019-7217

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

CVE-2019-7218

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

Cross site request forgery (csrf)

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

Authentication flaw

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

CVE-2019-7218

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

CVE-2019-7218

Citrix ShareFile vulnerable to a downgrade of authentication from two-factor to one-factor for versions before 19.23. An attacker who has access to the victim’s OTP token or authenticator app could bypass the username/password step and log in with username/OTP only. The issue affects the 2FA logi...

CVE-2019-7217

Summary: CVE-2019-7217 affects Citrix ShareFile prior to version 19.12, enabling user enumeration through OTP-check endpoints without authentication. Affected component appears to be the authentication/OTP verification flow, where server responses disclose whether a given username exists. The cit...

CVE-2019-7217

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

CVE-2019-12044 - Buffer Overflow Vulnerability in Citrix ADC and Citrix NetScaler Gateway

Description of Problem A buffer overflow vulnerability has been identified in Citrix ADC and Citrix NetScaler Gateway which could possibly result in a denial-of-service in a specific configuration. This vulnerability has been assigned the following CVE number: • CVE-2019-12044: Buffer overflow...

Failed to launch session "session_name". Error code: 2523 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

Failed to launch session "session_name". Error code: 2519 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article is intended for Citrix administrators and technical teams only. Non-admin users must...

Failed to launch session "session_name". Error code: 2524 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

Failed to launch session "session_name". Error code: 2520 on Citrix Workspace App During App/Desktop Launch

The following error is returned by the Citrix Gateway to Citrix CWA app when application/desktop launch fails: Failed to launch session . Error code: 2520...

PT-2019-6081

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1904 for Windows Citrix Receiver for Windows affected versions not specified Description The issue is related to incorrect access control in the Citrix Workspace App, which can be exploited by a remote...

CVE-2019-11550

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation...

Input validation

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation...

CVE-2019-11550

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation...

CVE-2019-11550

CVE-2019-11550 affects Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7, with an improper certificate validation flaw. The Citrix security update (CTX247735) notes an information-disclosure/man-in-the-middle risk on management traffic, requiring remediation. Affected v...

CVE-2019-11550

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation...

PT-2019-12373 · Citrix · Citrix Netscaler Sd-Wan +1

Name of the Vulnerable Software and Affected Versions: Citrix SD-WAN versions 10.2.x through 10.2.0 Citrix NetScaler SD-WAN versions 10.0.x through 10.0.6 Description: The issue is related to improper certificate validation. Recommendations: For Citrix SD-WAN versions 10.2.x through 10.2.0, updat...