5458 matches found
CVE-2018-17444
A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...
CVE-2018-17446
Citrix SD-WAN and NetScaler SD-WAN SQL Injection (CVE-2018-17446) affects Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x prior to 9.3.6 and 10.0.x prior to 10.0.4. The issue is a SQL injection vulnerability in the management interface, enabling an unauthenticated attacker with access to the mana...
CVE-2018-17448
An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...
CVE-2018-17447
CVE-2018-17447 is an information exposure vulnerability in Citrix SD-WAN and NetScaler SD-WAN where log files leak sensitive data. Affected versions include Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. The Citrix security bulletin CTX236992 notes several ...
CVE-2018-18517 - Cross-Site Scripting Vulnerability in Citrix NetScaler
Description of Problem A Cross-Site Scripting XSS vulnerability has been identified in Citrix NetScaler Gateway, formerly known as Citrix Access Gateway Enterprise Edition and Citrix ADC formerly known as NetScaler ADC, that if exploited by an attacker with access to the NetScaler administrative...
XenMobile/Endpoint Management: Cloud Gear Icon returning "this page isn't working HTTP ERROR 400"
Description: error "this page isn't working HTTP ERROR 400" may be displayed when trying to access the Cloud XenMobile / Endpoint Management Client instance when customers go to their own xxxx.xm.cloud and then click on the Could Gear Icon from the green tool bar at the top Doing so, will...
Workspace App for Windows - Error "Cannot start app" intermittently
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Intermittently application launch fails with errors "Cannot start" or "Cannot start app" In Windows...
Citrix Receiver for Web: Error "Cannot complete your request"
Error messages: "Cannot complete your request" on browser when accessing Store for web...
Citrix Workspace App (CWA) or Receiver for Windows launch fails after Install or upgrade with Real-time Media Engine (RTME) installed
After installing or upgrading Citrix Workspace App or Receiver for Windows on an endpoint with the Real-time Media Engine RTME installed, resource launch fails for any application or desktop. This might also happen on endpoints that have Cisco's VXME installed. CWA or Receiver displays one of the...
Black Box on screen on Mac Receiver version 12.9.0, 12.9.1 and Workspace app for Mac 18.08.
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Using XenApp VD Agent 7.15 CU2, we have big black boxes show up on screen during an active ICA sessi...
Users on IOS devices can not log into XenApp after upgrading to Citrix Workspace app for iOS, authentication broken in 17.08
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users on Ipad IOS devices can no longer log into XenApp after upgrading Citrix Receiver to Citrix...
Citrix NetScaler Management and Analytics System Default Administrator Credentials
The remote Citrix NetScaler Management and Analytics System MAS uses a default password 'nsroot' for the administrator account 'nsroot'. With this information, an attacker can gain complete administrative access to the Citrix NetScaler appliance. %NASLMINLEVEL 70300 C Tenable Network Security, In...
Citrix NetScaler Application Delivery Management (ADM)
The remote host appears to be running Citrix NetScaler Application Delivery Management ADM, formerly know as Management and Analytics System MAS. ADM provides centralized network management, analytics, automation, and orchestration to support applications deployed across hybrid cloud and...
Windows 10 v1903 and v1909 – Citrix Known Issues
Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. Microsoft released its Semi-Annual Channel called 'May 2019 Update' v1903 in May 2019 and released its nextSemi-Annual Channel called 'November 2019 Update' v1909 in November 2019. This article is...
Citrix ADM does not detect VPX's of SDX after SDX is upgraded from 11.0 to 11.1 and higher versions
We see all the VPX instances on ADM before the upgrade. After SDX is upgraded from 11.0 to 11.1 or a higher version, all the VPX's of the SDX disappear from Citrix ADM. All the config related to those VPX's are lost too. This includes licensed vServers and User Group entities bound to that VPX on...
Recommendation on installing SCCM Client on Citrix Virtual Desktop Master Image
Recommendations on installing of SCCM client on VDI master image...
How to use GPMC to manage Citrix Policies (GPOs) for your DaaS environment
This article describes the required steps to be able to correctly setup and configure the management of Citrix Policies using Microsoft's Group Policy Management Console gpmc from a machine other than a Citrix Delivery Controller DDC...
Citrix StorageZones Controller Improper Access Restrictions / Traversal Exploit
Citrix StorageZones Controller versions prior to 5.4.2 suffer from padding oracle, improper access restriction, and path traversal vulnerabilities. ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller...
Citrix StorageZones Controller Improper Access Restrictions / Traversal
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller vulnerable version: all versions before 5.4.2 fixed version: 5.4.2 CVE number: CVE-2018-16968,...
