Design/Logic Flaw

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

CVE-2017-18001

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

CVE-2017-18001: Missing Authentication for Critical Function

Trustwave Secure Web Gateway SWG through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI...

PT-2017-3498

Name of the Vulnerable Software and Affected Versions Trustwave Secure Web Gateway SWG versions prior to 11.8.0.28 Description The issue is related to errors in cryptographic key management. It allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and...

httpd: mod_ssl NULL pointer dereference

A NULL pointer dereference flaw was found in the httpd's modssl module. A remote attacker could use this flaw to cause an httpd child process to crash if another module used by httpd called a certain API function during the processing of an HTTPS request...

Secure Web cannot access external websites

Unable to browse external websites. Error " http 1.1 gateway timeout" on Secure Web. VPN mode : Full VPN Internal websites work fine...

Secure Web Error Connection has timed out reconnect to Secure Home to access work resources.

When Secure Web for iOSislaunched. We receivean error right away "Your connection has timed out. Please reconnect to Secure Hub to access work resources "Cancel, connect. If users clicks connect it redirects back to Secure Hub, prompts users to enter PIN/password. Then it redirects back to Secure...

Secure Web and Authentication flow.

The following table notes whether Secure Web prompts a user for credentials, based on the configuration and site type: Connection mode| Site type| Password caching?| SSO configured for NetScaler Gateway?| Secure Web prompts for credentials? ---|---|---|---|--- On first access of a website| On...

SecureWeb 10.x: HTTP 1.1 Gateway timeout error while accessing external/internal websites from Secure Web.

While accessing any internal/external websites using Secure we get the following error in Secure web Error : Http/1.1 gateway timeout error Unable to find the requested server or DNS Error...

Unable to upload a file to an internal webpage using Secure Web

XenMobile 10.x Secure Web 10.x iOS 10.x User able to access the upload site, however, upload never completes successfully w/ no error or other notification. Behavior doesn't occur when attempting same on an Android device...

Cannot open PDF files downloaded from Secure Web

Issue: Error while opening a PDF file from Secure Web: "Invalid PDF format."...

NetScaler is forcing the SSL connection on sites browsed with Secure Web

Web Links for HTTP resources attempting to connect via Secure Web over HTTPs and failing as resource does not exist on HTTPs...

tomcat: Infinite loop in the processing of https requests

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop...

UBUNTU-CVE-2015-2330

Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies...

Citrix Secure Web - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Citrix Secure Web published at the 'play' market has multiple vulnerabilities...

CVE-2016-9554

The Sophos Web Appliance Remote / Secure Web Gateway server version 4.2.1.3 is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php, in the component responsible for...

PT-2017-10203

Name of the Vulnerable Software and Affected Versions Sophos Web Appliance Remote / Secure Web Gateway version 4.2.1.3 Description The issue arises from a Remote Command Injection vulnerability in the web administrative interface, specifically in the MgrDiagnosticTools.php component. This...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

Secure Web - Error: Cannot open the page - too many http redirections

After the NSG Session times out and the user attempts to start Secure Web, the following error message appears "Cannot open the page - too many http redirections " - then it disappears and a message "Check your credentials - Logon " appears. " 2016-11-11T08:02:45.345+0100 ",,INFO...

HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web

HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web when traffic is tunneled through the NetScaler. This issue occurs when the MDX Policy is set for Secure Browse. If the preferred VPN mode on the app is set to FULL VPN TUNNEL, then the issue will not occur...