The CIS Critical Security Controls Explained - Control 2: Inventory of Authorized and Unauthorized Software

As I mentioned in our last post, the 20 critical controls are divided into System, Network, and Application families in order to simplify analysis and implementation. This also allows partial implementation of the controls by security program developers who aren't building a program from scratch,...

How to create an SSL Listener/Server Certificate for Citrix Endpoint Management

This knowledge base article guides users through the process of generating an SSL/Server certificate for Endpoint Management 10.x on a Windows server...

How to Configure Multiple Domains for Citrix Endpoint Management

The primary intent of this article is to provide steps on how to add additional domains in the Citrix Endpoint Management using Citrix Cloud Connector. This article is created assuming the first domain is already added to Citrix Endpoint Management...

How to Create Custom Android KeyStore for MDX App Wrapping

This article will guide the Citrix Endpoint Management admin in creating a custom keystore which will be used to sign the unsigned android apps using MDX toolkit and/or using MDX as a service...

How to Configure Certificate Based Authentication for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management...

Microsoft Certificate Authority Configuration for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management in MSCA...

How to Add AutoDiscovery Record for Citrix Endpoint Management

This article details on how to add the AutoDiscovery Record...

How to renew or request an SSL Certificate in Citrix Endpoint Management (XenMobile) Server

This article describes how to request or renew an SSL certificatefor Citrix Endpoint Management XenMobile Server...

Citrix Endpoint Management (XenMobile) Server Support Bundle Overview

The following table has key information about Citrix Endpoint Management XenMobile Server Support Bundle. For additional information please review the following link. This includes: List of log files included in the bundle Log type Description of what is included in the log file Analytical value ...

Wiping a Managed device by XenMobile

In Citrix Endpoint Management, admins perform device and app security actions from the Manage Devices page. Device actions include revoke, lock, unlock, and wipe. App security actions include app lock and app wipe. For details, see...

Citrix Endpoint Management / XenMobile Detection (HTTP)

HTTP based detection of Citrix Endpoint Management formerly XenMobile. When HTTP credentials are given, this script logs into the Endpoint Management / XenMobile server to obtain the installed patch release information. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Host Unique Identifiers

Nessus has discovered one or more unique identifiers used to tag or track the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid88145; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2016/01/27 21:09:09 $"; scriptnameenglish:"Host Unique Identifiers...

Radia Client Automation radexecd.exe command injection

Added: 02/25/2015 CVE: CVE-2015-1497 BID: 72612 OSVDB: 118382 Background Radia Client Automation is an endpoint management solution. Problem The radexecd.exe daemon does not properly authenticate or sanitize user requests, allowing remote attackers to execute arbitrary commands. Resolution Use th...

Radia Client Automation radexecd.exe command injection

Added: 02/25/2015 CVE: CVE-2015-1497 BID: 72612 OSVDB: 118382 Background Radia Client Automation is an endpoint management solution. Problem The radexecd.exe daemon does not properly authenticate or sanitize user requests, allowing remote attackers to execute arbitrary commands. Resolution Use th...

IBM Endpoint Manager - Persistent Cross-Site Scripting

Advisory: Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics Page During a penetration test, RedTeam Pentesting discovered that the IBM Endpoint Manager Relay Diagnostics page allows anybody to persistently store HTML and JavaScript code that is executed when the page is opened in a...

Endpoint Protector 4.0.4.0 Cross Site Scripting

Title: ====== Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities Date: ===== 2012-10-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=571 VL-ID: ===== 571 Common Vulnerability Scoring System: ==================================== 5 Introduction: =============...

Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities

Exploit for multiple platform in category web applications Details: ======== Multiple persistent input validation vulnerabilities are detected in Endpoint Protector v4.0.4.0 Appliance Application. The bugs allow remote attackers to implement/inject malicious script code on the application side...

HCL BigFix Client Installed (Windows)

HCL BigFix Client formerly IBM Tivoli Endpoint Manager Client, BigFix Enterprise Suite Client is installed on the remote Windows host. This software is used to facilitate management of the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...