Citrix Scout

NOTE: The latest version of Scout 3.x is intended to be run on Citrix Virtual Apps and Desktops 7.14 and newer. For additional information, please refer to Citrix Product Documentation You can download the required file from the Citrix downloads website by visiting the following...

CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows

Description of Problem A vulnerability has been identified in Citrix Workspace app and Receiver for Windows that could result in local drive access preferences not being enforced allowing an attacker read/write access to the clients local drives which could enable code execution on the client...

LDAP authentication vulnerability in Access Gateway Advanced Access Control

Description of Problem If the Advanced Access Control option AAC of Access Gateway is configured to use LDAP authentication then it is possible for a user to logon without supplying valid credentials. This vulnerability only affects AAC Version 4.2 deployments that are using LDAP authentication;...

CVE-2014-8580 - Authentication Flaw in Citrix NetScaler Application Delivery Controller and NetScaler Gateway Could Result in Unauthorised Access to Network Resources

Description of Problem An authentication flaw has been identified in certain configurations of Citrix NetScaler ADC and NetScaler Gateway that could allow an authenticated user to obtain unauthorised access to network resources for another authenticated user. This flaw affects the following...

CVE-2019-11550 - Citrix SD-WAN Security Update

Description of Problem An information disclosure vulnerability has been identified in the Citrix SD-WAN Appliance. This vulnerability could allow an unauthenticated attacker to perform a man-in-the-middle attack against management traffic. The vulnerability has been assigned the following CVE...

My Path to Akamai

Three years ago, I graduated with a bachelor's degree in Electronic Engineering Mechatronic from University Tun Hussein Onn Malaysia. I was to be an engineer in the oil and gas industry - but the universe had a better plan for me. Instead, I stepped into IT, providing Technical Support despite my...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. In addition, unprivileged code in a PV guest VM may be able to cause that guest VM to...

Selection of Accounts with more than one Store in Workspace App is not getting retained

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If you select All accounts from the UI of the CWA for Windows for version 1909 or higher, the...

Security Bulletin: Vulnerability in OpenSSL affects IBM Sterling Connect:Express for Unix (CVE-2016-2842).

Summary This bulletin addresses CVE-2016-2842 for IBM Sterling Connect:Express for Unix. Vulnerability Details OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling Connect:Express for Unix. IBM Sterling Connect:Express for Unix addressed...

Security Bulletin: Websphere Application Server Liberty vulnerabilities used by IBM Streams

Summary Websphere Application Server Liberty vulnerability CVE-2020-4329 affecting IBM Streams Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain...

Support Incident Tracker SQL Injection Vulnerability (CNVD-2021-25275)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A SQL injection vulnerability exists in Support Incident Tracker version 3.67 p2. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

Create a HAR file for Safari

The following instructions provide the steps necessary to create a HAR file when it is requested from Citrix Technical Support...

Create a HAR file for Firefox

The following instructions provide you the steps necessary to create a HAR file when it is requested from Citrix Technical Support...

Security Bulletin: Vulnerability in Apache CXF affects WebSphere Application Server Liberty

Summary There are vulnerabilities in Apache CXF affects WebSphere Application Server Liberty used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-12406 DESCRIPTION: Apache CXF is vulnerable to a denial of service, caused by the failure to...

Security Bulletin: Vulnerabilities in Swagger affects WebSphere Application Server Liberty

Summary There are vulnerabilities in Swagger that affects WebSphere Application Server Liberty used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-17495 DESCRIPTION: Swagger UI could allow a remote attacker to obtain sensitive information,...

Security Bulletin: IBM InfoSphere QualityStage is affected by a Cross-site scripting vulnerability

Summary A Cross-site scripting vulnerability was addressed by IBM InfoSphere QualityStage. Vulnerability Details CVEID: CVE-2020-4384 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Commons BeanUtils CVE-2019-10086

Summary A vulnerability in Apache Commons BeanUtils that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2019-10086 DESCRIPTION: Apache Commons Beanutils could allow a remote attacker to gain unauthorized access to the system, caused by the failure to...

Security Bulletin: A vulnerability in Apache Struts affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Struts used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to protect against unintended remote...

Citrix ShareFile storage zones Controller multiple security updates

Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...

CVE-2019-11999

Potential security vulnerabilities have been identified in HPE OpenCall Media Platform OCMP resulting in remote arbitrary file download and cross site scripting. HPE has made the following updates available to resolve the vulnerability in the impacted versions of OCMP. For OCMP version 4.4.X -...