Patch now! Citrix Sharefile joins the list of actively exploited file sharing software

The Cybersecurity and Infrastructure Security Agency CISA has added a vulnerability to its catalog of know exploited vulnerabilities, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies need to remediate this vulnerability by September 6, 2023...

"404 Not Found" Error When Accessing NetScaler Gateway index.html Page After NetScaler Upgrade

Following an NetScaler upgrade, attempting to access the Citrix Gateway index.html page results in a "404 Not Found" error...

WEM Console - A valid license server with appropriate licenses needs to be configured

When opening the WEM server this gives an error"A valid license server with appropriate licenses needs to be configured" The license server and port are correctly configured in WEM Infrastructure Service console The licenses have the correct SA DAte in Citrix Studio Servers are reachable over the...

CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a critical security flaw in Citrix ShareFile storage zones controller to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active in-the-wild exploitation. Tracked as CVE-2023-24489 CVSS score: 9.8, the...

Citrix NetScalers backdoored in widespread exploitation campaign

Fox-IT has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure DIVD. Over 1900 instances were found to have a backdoor in the form of a web shell. These backdoored NetScalers can be taken over at will by an...

Driver Disk for Microsemi smartpqi 2.1.24_046 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- smartpqi| SAS/Storage Controller| 2.1.24046 Issues resolved in thi...

ShareFile Documents Unauthenticated Access (CTX559517)

Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to remotely compromise the...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

Nearly 2,000 Citrix NetScaler Instances Hacked via Critical Vulnerability

Nearly 2,000 Citrix NetScaler instances have been compromised with a backdoor by weaponizing a recently disclosed critical security vulnerability as part of a large-scale attack. "An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing web shells on vulnerable...

Cannot launch applications nor desktops at the second try in Citrix Workspace App

After adding the store to Workspace App, users can launch applications successfully for the first time. But when users exit the Workspace app and reopen it, they fail to launch applications on the second try. Error "Your apps are not available at this time" appears...

Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers...

Joining Server Group failed with error "Exception attempting to authorize, TCP error code 10060"

Joining the Server Group failed with the following errors. Studio UI: Please refer to the Windows Event Log on the Authorizer details. Windows Event Log: Citrix Cluster Join Service,1,2201,"Join failed. Exception attempting to authorize. Could not connect to...

Re-installation Session Recording Agent fails with Error 1920

Session Recording Agent installation failed with Error 1920, below events are logged on VDA Application Event log Event ID : 11920 with message Error 1920. Service 'Citrix Session Recording Agent' CitrixSmAudAgent failed to start. Verify that you have sufficient privileges to start system service...

Numlockが勝手に切り替わる

公開デスクトップ利用中に USB テンキーパッドのオン・オフが勝手に切り替わってしまうことがありました。 ・USB テンキーパッドの機種を変更したところ、事象が発生しなくなりました ・使用アプリケーションや操作内容には依存しません ・USB テンキーパッド部分の操作中、意図せず発生した事象であり、キーボードのその他キー操作では発生しませんでした ・なお、接続元端末における以下のレジストリ設定変更では解消しませんでした。 HKEYLOCALMACHINE\SOFTWARE\Wow6432Node\Citrix\ICA Client\Engine\Lockdown Profiles\All...

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS...

Metasploit weekly wrap-up

New module content 1 Metabase Setup Token RCE Authors: Maxwell Garrett, Shubham Shah, and h00die Type: Exploit Pull request: 18232 contributed by h00die Path: exploits/linux/http/metabasesetuptokenrce AttackerKB reference: CVE-2023-38646 Description: This adds a module for an unauthenticated RCE...

Microsoft Security Update Validation Report August 2023

Microsoft’s August 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues August still be found upon implementation. Follow best practices for testing and installing...

Unable to list or change the Master Image for a MCS catalog in Studio

Unable to list or change the Master Image for a MCS catalog in Studio. Error Cannot find path 'XDHyp:\HostingUnits\\image.folder\undefined.sharedsubscription' because it does not exist. For details, click here. If the problem persists, contact Citrix Technical Support. Transaction ID:...

How to change admin profile on Citrix NetScaler VPX instances configured in cluster

This article provides instruction to change the admin profile of a Citrix NetScaler VPX instance that is configured in a cluster on a Citrix NetScaler SDX appliance. Requirements Two Citrix NetScaler SDX appliances should be provisioned in advance with Citrix NetScaler VPX instances and they shou...

How to pre-populate domain name in Citrix Web Studio logon page

This article describes how to automatically pre-populate the domain name in Citrix Web Studio logon page. Requirements Citrix Web Studio Read/writeaccess to C:\Program Files\Citrix\Web Studio\Site...