VulnCheck KEV: CVE-2023-24488

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway virtual environment access control systems (formerly known as Citrix NetScaler Gateway) relates to an operation that goes beyond the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway access control system formerly Citrix NetScaler Gateway relates to an operation that goes beyond the buffer in memory. Exploiting this vulnerability...

CISA Releases Guidance for Addressing Citrix NetScaler ADC and Gateway Vulnerability CVE-2023-4966, Citrix Bleed

Today, CISA, in response to active, targeted exploitation, released guidance for addressing Citrix NetScaler ADC and Gateway vulnerability CVE-2023-4966. The vulnerability, also known as Citrix Bleed, could allow a cyber actor to take control of an affected system. CISA recommends organizations...

How to create a custom log when a user 'logs in' or 'logs out' of the Gateway session.

Demonstrate on Citrix Gateway How to create a custom log when a user 'logs in' or 'logs out' of the Gateway to a Storefront session...

Citrix Gateway / ADC Sensitive Information Exposure

Citrix ADC and Gateway 13.0-x 13.0-92.19, 13.1-x 13.1-49.15, 14.1-x 14.1-8.50, and ADC FIPS/NDcPP 12.1-x 12.1-55.300 suffer from a Sensitive Information Disclosure. By crafting a specific query, a remote and unauthenticated attacker can leverage this vulnerability to obtain a valid session token...

Citrix Gateway unable to connect to Citrix Endpoint Management Cloud server

Citrix Gateway unable to connect to Citrix Endpoint Management cloud server due to SSL certificate issue Symptoms include the below, STA shows down. Secure Hub fails in Enrollments Secure Hub fails to access store...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is version 12.1, 12.1-FIPS before 12.1-55.300-FIPS, 13.0 before 13.0-92.19, 13.1 before 13.1-49.15, 13.1-FIPS before 13.1-37.164-FIPS, or 14.1 before 14.1.8.50. It is therefore affected by multiple...

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to operations that go beyond buffer boundaries in memory. This allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway relates to operations that go beyond the buffer boundaries in memory. Exploiting...

Configuring Gateway nfactor authentication with Radius first & LDAP second

Describe how to configure Citrix Gateway appliance to use RADIUS authentication as first factor and LDAP authentication as second factor The Storefront - Gateway Integration should be in place using 'Domain' Logon type in the Gateway configuration in the menu 'Manage Citrix Gateway'...

How to track the Citrix Gateway Service Points-of-Presence(PoP) of active HDX session

Citrix Gateway Service is designed to operate across multiple Points of Presence POPs in order to enhance availability and performance. In the event that a POP goes down or experiences connectivity degradation beyond specified thresholds. Citrix Optimal Gateway Routing responds to subsequent DNS...

NetScaler AAA sessions' explanation under "Reporting>Citrix Gateway>AAA>AAA sessions"

This guide provides an explanation of the "AAA sessions" section within the ADC Application Delivery Controller reporting, specifically under "Citrix Gateway."...

NetScaler Gateway show Blank page after authentication passed

After citrix gateway authentication pass, user is not redirected to Storefront page instead of blank page...

"Error: Not a privileged user” after Citrix Gateway authentication passed

After users input their username and password on the NetScaler Gateway login page, the URL redirects to the StoreFront SF URL. However, the application list fails to display, and an error message stating "Error: Not a privileged user" appears...

Responder policy not honored when binding to NetScaler Gateway with AAA_REQUEST type

A situation has arisen where certain responder policies intended for filtering whitelist users on Citrix Gateway fail to operate as expected...

How to add page footer on Citrix Gateway logon page with X1 based portal theme

...

SAML Intermittence on Citrix Gateway: Internal server error 43524

Users may experience intermittent issues during the SAML configuration process on Citrix Gateway. This can result in unpredictable behavior, with some users successfully accessing the SAML login while others encountering an "Internal server error 43524" message...

"404 Not Found" Error When Accessing NetScaler Gateway index.html Page After NetScaler Upgrade

Following an NetScaler upgrade, attempting to access the Citrix Gateway index.html page results in a "404 Not Found" error...

Error: "The connection to "xxx" failed with status (Unknown client error 1110). SSL Error 31"

When accessing Applications via Citrix Gateway, the Applications' ICA file download successfully, but launching failed with below errors: "Unable to connect to the server. Contact your system administrator with following error: SSL Error 31: The operation completed successfully" Error 'The...

Citrix ADC nsppe buffer overflow

Added: 08/09/2023 CVE: CVE-2023-3519 Background Citrix ADC formerly NetScaler ADC is an application delivery and load balancing platform. Problem A buffer overflow vulnerability in the nsppe process in Citrix ADC allows an unauthenticated attacker to execute arbitrary commands by making a special...

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access (formerly Citrix Gateway), is related to insecure management of privileges. This issue needs to be addressed to enhance the security of privileges.

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access formerly Citrix Gateway, is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...