Error: "Your logon has expired. Please log on again to continue." When Users Logon to StoreFront 1.2

After IT Administrators enable the ‘requireTokenConsistency’ parameter to ‘true ’ on StoreFront’s ‘store’ configuration file C:\inetpub\wwwroot\Citrix\Web.config users might not be able to access the resources. This feature is used to allow SmartAccess conditions to be passed from StoreFront...

Best practices for defending Azure Virtual Machines

One of the things that our Detection and Response Team DART and Customer Service and Support CSS security teams see frequently during investigation of customer incidents are attacks on virtual machines from the internet. This is one area in the cloud security shared responsibility model where...

Citrix WEM Agents not Synchronizing Error “No Connection Could be Made Because The Target Machine Actively Refused it”

Citrix Virtual Delivery Agents running Workspace Environment Management WEM Agents are not synchronizing with two or more WEM Broker servers load balanced via Citrix Gateway. Policies delivered through WEM are not applying to agents Event Viewer shows the following error:“No connection could be...

Crescendo - A Swift Based, Real Time Event Viewer For macOS - It Utilizes Apple's Endpoint Security Framework

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework. Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1.- Ensure that you have moved the app to your /Applications director o...

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019

Update for Windows Server 2012 and Windows Embedded 8 Standard: June 21, 2019 Summary This update for Windows Server 2012 and Windows Embedded 8 Standard includes the quality improvements from KB4503263 released June 11, 2019, in addition to these key changes: Addresses an issue that may display...

Microsoft Windows Event Viewer XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Event...

Microsoft Windows: Turn on Module Logging

This policy setting allows you to turn on logging for Windows PowerShell modules. If you enable this policy setting, pipeline execution events for members of the specified modules are recorded in the Windows PowerShell log in Event Viewer. Enabling this policy setting for a module is equivalent t...

The vulnerability of the Windows Event Viewer component (eventvwr.msc) in the Windows operating system, which allows a malicious individual to read arbitrary files

The vulnerability of the Windows Event Viewer component eventvwr.msc in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to read arbitrary files using a specially created XML file...

June 26, 2019—KB4509476 (OS Build 15063.1898)

None None...

June 26, 2019—KB4509479 (OS Build 17763.593)

None None...

Update for Windows 8.1 and Windows Server 2012 R2: June 20, 2019

Update for Windows 8.1 and Windows Server 2012 R2: June 20, 2019 Summary This update for Windows 8.1 and Windows Server 2012 R2 includes the quality improvements from KB4503290 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detect...

Update for Windows Server 2008 SP2: June 20, 2019

Update for Windows Server 2008 SP2: June 20, 2019 Summary This update for Windows Server 2008 SP2 includes the quality improvements from KB4503287 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detected an error in a snap-in and...

June 20, 2019—KB4503283 (Preview of Monthly Rollup)

None None...

June 20, 2019—KB4503271 (Preview of Monthly Rollup)

None None...

CVE-2019-0948

An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration...

CVE-2019-0948

An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration...

Information disclosure

An information disclosure vulnerability exists in the Windows Event Viewer eventvwr.msc when it improperly parses XML input containing a reference to an external entity, aka 'Windows Event Viewer Information Disclosure Vulnerability'...

CVE-2019-0948

CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...

CVE-2019-0948 Windows Event Viewer Information Disclosure Vulnerability

...

Microsoft Windows Event Viewer Information Disclosure Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Event Viewer is one of the event viewers. An information disclosure vulnerability...