Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)

Security Fixes : - kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128224; scriptversion"1.4";...

Cryptographic Update in Citrix Workspace App for Android

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Objective This feature is an important change to the secure communication protocol. Cipher suites wi...

Error Code 42B when using Citrix Gateway Native OTP authentication in Citrix Workspace app for Android upgrade

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error message appears even after upgrading to the latest version of Citrix Workspace...

Information disclosure

Under certain conditions, SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure...

Cross site scripting

When creating a module in SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other...

CVE-2019-0334

When creating a module in SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other...

CVE-2019-0331

Under certain conditions, SAP BusinessObjects Business Intelligence Platform BI Workspace, versions 4.1, 4.2, 4.3, allows an attacker to access sensitive data such as directory structure, leading to Information Disclosure...

kde-workspace security and bug fix update

kdelibs 6:4.14.8-10 - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz1710362 6:4.14.8-9 - Do not fork konsole process when opening terminal from apps using dolphin-part Resolves: bz1710362 6:4.14.8-8 - Disable JAR repack script to avoid multilib...

Workspace App for Linux 1906 giving “Unacceptable TLS Certificate” error

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. With the Citrix Workspace App for Linux 1906 and above, if you are using a SAML store with AuthV3, a...

F5 Networks BIG-IP : iRulesLX debug NodeJS vulnerability (K75532331)

Similar to the issue identified inCVE-2018-12120, the BIG-IP system will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.CVE-2019-6644 Impact A remote attacker may be able ...

RHEL 7 : kde-workspace (RHSA-2019:2141)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2141 advisory. The K Desktop Environment KDE is a graphical desktop environment for the X Window System. The kdelibs packages include core libraries for the K Deskt...

How to locate and download Citrix Workspace App

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149 for more information. Assist with locating and downloading the latest or earlier versions of Citrix Workspace App or Citrix...

Information Disclosure

kde-workspace is vulnerable to information disclosure. It does not sanitize the notifications, allowing to leak client IP address via IMG element...

Workspace App for Android - RSA software token import errors

Unable to import RSA Soft Token file in Workspace App for Android receiving error message: "Token import failed" or “Error code %1$X...

Low: Red Hat Security Advisory: kde-workspace security and bug fix update

An update for kde-workspace, kde-settings, kdelibs, kmag, and virtuoso-opensource is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CloudBees Jenkins Google Kubernetes Engine Plugin Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Google Kubernetes Engine Plugin is used in whi...

SAP BusinessObjects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2019-25982)

SAP BusinessObjects Business Intelligence Platform is a suite of bookstore intelligence software and enterprise performance solutions from Germany's SAP. The product features report generation, analytics and data visualization. A cross-site scripting vulnerability exists in SAP BusinessObjects...

HTML5 receiver - Audio in high quality stops working when Skype for Business loads

The issue originates when a user logs in to a VDA, and in the background automatically launching Skype for Business. As soon as the application launches HDX Audio stops functioning. This only happens if the audio is set to "HIGH" on the VDA. When terminating Skype for Business and you reconnect t...

CVE-2019-10365

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission...

Code injection

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission...