PT-2020-13749

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1912 Description The issue allows local users to gain privileges during the uninstallation of the application due to Insecure Permissions and an Unquoted Path vulnerability. Recommendations For versions...

CVE-2020-13885: Incorrect Default Permissions

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13884: Incorrect Default Permissions

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

PT-2020-13750

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1912 Description The issue is related to Insecure Permissions, which allows local users to gain privileges during the uninstallation of the application. Recommendations For versions prior to 1912, update ...

VA VD 1912 CU1 : Firefox browser unable to detect workspace 1912

Firefox browser does not automatically detect Citrix Workspace...

IBM Planning Analytics Planning Analytics Workspace Cross-Site Scripting Vulnerability

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics Planning Analytics Workspace...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by multiple vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 53. Vulnerability Details CVEID: CVE-2018-16492 DESCRIPTION: Node.js extend...

CVE-2020-1192: Undefined Security Weakness

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2019-17066

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

CVE-2019-17066

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

Design/Logic Flaw

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

CVE-2019-17066

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

CVE-2019-17066

Ivanti WorkSpace Control prior to 10.4.40.0 is affected by a local privilege elevation vulnerability where a user can hijack certain user registry entries (HKCU) because pwrgrid.exe checks the Current User registry hives when starting an elevated application. This is the documented root cause and...

CVE-2019-17066: Improper Privilege Management

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting an application with elevated rights...

Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2020-33485)

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti WorkSpace Control versions prior to 10.4.40.0, which...

Citrix Workspace App for Mac - Webcam redirection via MS Teams (i.e. Both 32-Bit and 64-Bit)

Workspace app for MAC introduced support for HDX Webcam redirection for 64-bit apps, and hence support Teams. Older versionsdo not support MS Teams for Webcam redirection. We are currently working onTeams Optimization Packcontact your Account Manager to get access to EAR - this technology would...

PT-2020-9866

Name of the Vulnerable Software and Affected Versions Ivanti WorkSpace Control versions prior to 10.4.40.0 Description A user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives HKCU when starting...

Visual Studio Code Python Extension Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Error "No Apps available at this time" on workspace for iOS app after upgrading to ADC 13.0 build 52.24

After upgrading ADC to version 13.0 build 52.24 iOS Workspace App misbehaving by presenting a longer form against usual and error "No Apps available at this time"on login...

Slack: Workspace configuration metadata disclosure

Slack allows users to create a Workspace using the Get Started page, located at https://slack.com/get-started/create. This process uses workspace metadata to direct the user-provided email address to existing Slack accounts. However, if a domain pertaining to an Enterprise customer is submitted...