Citrix Secure Access for Windows fails to allow traffic through VPN after an upgrade to 23.x.x.x

After a successful connection to the Citrix Secure Access CSA client in full tunnel, none of the traffic passes through the VPN. Access to the applications using an IP address or DNS over the tunnel is blocked. The issue is limited to domain-joined machines where the Intranet IP address is...

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access (formerly Citrix Gateway), is related to improper code generation. This allows a malicious individual to execute arbitrary code.

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access formerly Citrix Gateway, is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user navigate to a...

How to capture and collect logs Citrix Secure Access VPN Plug-in on Windows.

Allow the capture of VPN Plug-In Citrix Secure Access debugging logs for 13.1 and higher builds...

CVE-2023-24492

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

CVE-2023-24492

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

Design/Logic Flaw

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

Design/Logic Flaw

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

CVE-2023-24492

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

CVE-2023-24492

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts...

CVE-2023-24492

The CVE-2023-24492 issue affects the Citrix Secure Access client for Ubuntu. A remote attacker can achieve code execution if a vulnerable user opens an attacker-crafted link and accepts subsequent prompts. Affected versions are prior to 23.5.2; mitigation is to update to 23.5.2 or later as indica...

CVE-2023-24491

The CVE-2023-24491 vulnerability affects the Citrix Secure Access client for Windows (versions before 23.5.1.3). It enables a local Privilege Escalation from a Standard User to NT AUTHORITY\SYSTEM when the vulnerable client is present on the endpoint. Citrix’ security bulletin (CTX561480) indicat...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

Citrix Secure Access client for Windows Security Bulletin for CVE-2023-24491

A vulnerability has been discovered in the Citrix Secure Access client for Windows. The following supported versions are affected by the vulnerability: Versions before 23.5.1.3 The issue has the following identifier:...

Citrix Systems Secure Access 安全漏洞

Citrix Systems Secure Access is a secure access solution from Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Secure Access versions prior to 23.5.1.3 that originates from the installation of a standard user account access endpoint from a vulnerable client that can escalate...

Citrix Secure Access client for Ubuntu Security Bulletin for CVE-2023-24492

Vulnerabilities have been discovered in Citrix Secure Access client for Ubuntu previously Citrix Gateway VPN client for Ubuntu. The following supported versions are affected by the vulnerability: Versions before 23.5.2 The issue has the following identifier: CVE ID| Affected Products| Description...

Citrix Systems Secure Access 代码注入漏洞

Citrix Systems Secure Access is a secure access solution from Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Secure Access versions prior to 23.5.1.3, which can be exploited by an attacker to remotely execute code if the victim user opens a link crafted by the attacker and...

PT-2023-3491 · Citrix · Citrix Secure Access +1

Name of the Vulnerable Software and Affected Versions: Citrix Secure Access formerly Citrix Gateway versions affected versions not specified Citrix Secure Access client for Ubuntu affected versions not specified Description: The issue is related to incorrect code generation management in the acce...