Design/Logic Flaw

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards in the Analytics...

CVE-2022-43566 Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards in the Analytics...

CVE-2022-43566 Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards in the Analytics...

CVE-2022-43566

CVE-2022-43566 affects Splunk Enterprise: versions prior to 8.2.9, 8.1.12, and 9.0.2 allow an authenticated user to execute risky commands using a more privileged user’s permissions to bypass SPL safeguards in Analytics Workspace. The attack requires phishing the victim into initiating a request ...

PT-2022-26969 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 8.2.9 Splunk Enterprise versions prior to 8.1.12 Splunk Enterprise versions prior to 9.0.2 Description: The issue allows an authenticated user to run risky commands using a more privileged user’s permission...

CVE-2022-43566: Improper Input Validation

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards in the Analytics...

Slack: Unauthorized access to GovSlack

An unauthorized user could create a workspace on GovSlack by copying and sending a fetch request payload from slack.com to slack-gov.com, which would bypass the disabled option to create a workspace for new users. This could result in unauthorized access to GovSlack...

[NetScaler] Black Screen in launching ICA when enabling HDX Insight

Launching ICA through Citrix Gateway with HDX Insight enabled, you may see black screen issuerandomly for about 3040 seconds in the beginning of desktop view on Citrix Workspace App...

CVE-2022-43432: Protection Mechanism Failure

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

CVE-2022-41708

CVE-2022-41708 concerns Relatedcode’s Messenger (version 7bcd20b). The vulnerability stems from improper permission validation, allowing an authenticated external attacker to access existing chats in the workspaces of any user. Public sources consistently describe an authentication requirement wi...

CVE-2022-43435: Protection Mechanism Failure

Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

Content-Security-Policy protection for user content disabled by XFramium Builder

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder 1.0.22 and earlier globally disables the Content-Security-Poli...

Content-Security-Policy protection for user content disabled by ScreenRecorder

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. ScreenRecorder 0.7 and earlier programmatically updates the Java system propert...

Need to enter credentials multiple times via Workspace app access on MAC OS clients

The users need to enter credentials multiple times when using Workspace app to login to Gateway on MAC OS clients. Finally, the users still encounter the following error. Web access works well. MAC OS version:...

CWA 2206 or Above: Citrix Published Applications Randomly Lose Focus Or Get Minimized

Citrix Published applications randomly lose focus, hide behind another window or become minimized when using Citrix Workspace App 2206 and above. This only happens when locally-installed Chrome or Edge browsers are also running on the user's local computer...

Microsoft Teams optimization on Citrix Workspace app for Chrome OS

Pre-requisites/System Requirements Why you should use Teams optimization Configuring Microsoft Teams optimization Caveats Troubleshooting Pre-requisites/System Requirements...

Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2021-40690, CVE-2022-25647, XFID: 233967)

Summary IBM Planning Analytics Workspace is affected by multiple vulnerabilities. Apache Santuario Security for Java provides a mechanism for XML-Signature & XML Encryption syntax and processing CVE-2021-40690. Google Gson is an open-source Java library to serialize and deserialize Java objects t...

Citrix Cloud - Display messages to users in cloud workspace

Need to be able to customize messages when users log into cloud workspace to inform when of any maintenance or planned outages...

Korean keyboard (101 key) Type 2 & 3 cannot be synced using “Sync only once” mode.

For Windows 10/11 as VDA, CWA Windows client machine uses Microsoft Korean IME with the Korean keyboard 101 key Type 2, or Type 3. The Citrix Workspace keyboard sync mode is configured as “Sync only once” in the Keyboard and Language Bar setting. Starting the Windows 10/11 Desktop/APP session, th...

Slack: Ability to join an arbitrary workspace by utilizing a proxy to manipulate invite links

A vulnerability was found in Slack that allowed experienced researchers to utilize an intercepting proxy to manipulate invite links and join an arbitrary workspace without admin approval. The issue was fixed immediately and no customers were impacted...