6301 matches found
Doppler VDP: Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages
Summary: I have found a stored XSS vulnerability in the following config setting page. https://dashboard.doppler.com/workplace//projects/example-project/configs/dev/logs When you invite other users to the workspace, the xss could be used to exploit other users also. Steps To Reproduce: 1 . Visit...
Workspace App 1912.1000 - Workspace App Update removes user created shortcuts from Desktop
Consider the following scenario: Users have created shortcuts of published applications manually on their Desktop and have also pinned it to the task bar. When the Receiver is upgraded from 4.9.6001 to Workspace App for Windows 1912 or 2006, on the first launch of a published app, the shortcuts...
Auto-Update Fails with Citrix Workspace App 2012 for Windows
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Automatic updates from Citrix Workspace app 2012 for Windows fails with the error "Could not load fi...
PT-2020-13982
Name of the Vulnerable Software and Affected Versions Eclipse Che versions prior to 7.14.0 Description A flaw in Eclipse Che impacts CodeReady Workspaces, allowing a Cross-Site Request Forgery CSRF and a cross-site WebSocket hijack on Theia IDE when configured with cookies authentication. This...
NSA Warns Russian Hacker Exploiting VMware Bug to Breach Corporate Networks
The US National Security Agency NSA on Monday issued an advisory warning that Russian threat actors are leveraging recently disclosed VMware vulnerability to install malware on corporate systems and access protected data. Specifics regarding the identities of the threat actor exploiting the VMwar...
VMware Workspace ONE Access HTTP Detection
Binary data vmwareworkspaceoneaccesswebdetect.nbin...
VMware Workspace One Access / VMware Identity Manager Command Injection Vulnerability (VMSA-2020-0027)
The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by a unspecified command injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version. C Tenable...
Error Message Connection to "ip address" has been lost. Please check your network and try again.
When launch app from ADC on Linux workspace app, it shows below error: Connection to "192... - NETWORK" has been lost. Please check your network and try again...
How to collect logs for Citrix Workspace App for Windows
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes the steps for collecting logs and key data from Citrix Workspace app for Windows...
NSA Warns: Patched VMware Bug Under Active Attack
Active attacks against a flaw in VMware’s Workspace One Access continue, three days after the vendor patched the vulnerability and urged customers to fix the bug classified as a zero-day at the time. Now the U.S. National Security Agency NSA has escalated concerns and on Monday warned that foreig...
NSA Releases Advisory on Russian State-Sponsored Malicious Cyber Actors Exploiting CVE-2020-4006
The National Security Agency NSA has released a Cybersecurity Advisory on Russian state-sponsored actors exploiting CVE-2020-4006, a command-injection vulnerability in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. The actors were found exploiting...
VMware Rolls a Fix for Formerly Critical Zero-Day Bug
VMware has patched a zero-day bug that was disclosed in late November – an escalation-of-privileges flaw that impacts Workspace One and other platforms, for both Windows and Linux operating systems. VMware has also revised the CVSS severity rating for the bug to “important,” down from critical. T...
VMware Releases Security Updates to Address CVE-2020-4006
VMware has released security updates to address a vulnerability—CVE-2020-4006—in VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructur...
VulnCheck KEV: CVE-2020-4006
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute...
Citrix Workspace App for Android Facing Session Disconnection After Few Minutes of Inactivity
After few minutes of user session being inactive on CWA for Android, they see the below error: "We were unable to connect to the server. We were unable to tunnel through the proxy. " This can be seen about 3-4 minutes after the user device enter lock screen. The lock screen can happen either...
The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, and administration consoles like VMware Identity Manager and VMware Workspace One Access, arises due to insufficient validation of arguments passed to commands. This allows attackers to execute arbitrary commands.
The vulnerability of the vRealize Suite Lifecycle Manager software, a virtualization platform from VMware Cloud Foundation, as well as the VMware Identity Manager administration consoles and VMware Workspace One Access application management platform, is related to insufficient validation of...
Critical Unpatched VMware Flaw Affects Multiple Corporates Products
VMware has released temporary workarounds to address a critical vulnerability in its products that could be exploited by an attacker to take control of an affected system. "A malicious actor with network access to the administrative configurator on port 8443 and a valid password for the...
CVE-2020-4006
VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerability...
