CVE-2024-44104: Authentication Bypass by Spoofing

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-42423: Incorrect Authorization

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

PT-2024-6662 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to the transmission of sensitive information in cleartext, allowing a local authenticated attacker to obtain operating system credentials. This can be...

PT-2024-6661 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to DLL hijacking in the management console of Ivanti Workspace Control, which allows a local authenticated attacker to escalate their privileges. This is...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management and report management. A security vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from th...

PT-2024-38662 · Citrix · Citrix Workspace App For Windows

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for Windows affected versions not specified Description: Local privilege escalation allows a low-privileged user to gain SYSTEM privileges. Recommendations: At the moment, there is no information about a newer version tha...

Citrix Workspace App for Windows Privilege Escalation (CTX678036)

The version of Citrix Workspace installed on the remote host is prior to 2203.1 LTSR CU6 Hotfix 2, 2402 LTSR or 2403.1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the CTX678036 advisory. - Local Privilege escalation allows a low-privileged user to gain...

Performance issues with Intel GPUs and Citrix Workspace App

Customers using the Citrix Workspace App with Intel Arc GPUs and Intel GPU driver version 4824 could experience performance issues and lag The performance issues are present in Intel Arc A-series GPUs and Intel Core Ultra with built-in Arc GPUs, for example: Intel Arc A-Series Graphics Intel Arc...

Fortinet SSL VPN Bruteforce Login Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforce Login Utility', 'Description' = % This module scans for Fortinet SSL VPN web login portals and performs login brute...

Citrix Workspace App for IOS version 24.8.0 is crashing for users using MicroVPN

Post autoupdate of CWA for IOS 24.8.0, IOS user experiences CWA crash Issue is affecting customers with MicroVPN enabled...

Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Planning Analytics Workspace. These issues have been addressed by upgrading or removing the vulnerable libraries. Please refer to the table in the Related Information section for vulnerability impact...

Workspace App for Windows shows "Fatal error during installation" while launching applications.

Note: this article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149 for more information. After an .ica file has been downloaded during a launch attempt from browser, the following...

Slackware: Security Advisory (SSA:2024-240-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 plasma-workspace Vulnerability (SSA:2024-240-02)

The version of plasma-workspace installed on the remote host is prior to 5.23.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-240-02 advisory. New plasma-workspace packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding...

[slackware-security] plasma-workspace

New plasma-workspace packages are available for Slackware 15.0 to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/plasma-workspace-5.23.5-i586-4slack15.0.txz: Rebuilt. This update patches a security issue: ksmserver: Unauthorized users can access...

Citrix Workspace App for HTML5 GACS Bypass

The vulnerability of the Citrix Workspace App for HTML5 is related to incorrect default permissions. Exploiting this vulnerability could allow a malicious actor to bypass the configuration parameters of the GACS Global App Configuration service...

Citrix Workspace App Privilege Escalation

The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...

CWA for Android: Mobile Devices are not able to see the resources

Mobile Devices are not able to see the resources User may see Spinning wheel on Android device after adding Storefront URL in Workspace App...

Security update for plasma5-workspace (moderate)

openSUSE Security Update: Security update for plasma5-workspace Announcement ID: openSUSE-SU-2024:0161-1 Rating: moderate References: 1225774 1226110 Cross-References: CVE-2024-36041 CVSS scores: CVE-2024-36041 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE...

Citrix Workspace App for HTML5 URL Redirection

The vulnerability of the Citrix Workspace App for HTML5 relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...