Citrix workspace app | Uninstallation of CWA breaks ICA session

If we have VDAs with this order of installation CWA installed first and then the VDA. Now when wetryto uninstall or upgrade the CWA, some display drivers from thevda get removed, as a result the ICA session breaks and the only way to get it working again is to - reinstall the VDA reboot,...

Citrix Systems XenApp Information Disclosure Vulnerability

Citrix Systems XenApp is a suite of application virtualization software from Citrix Systems USA. The software supports the distribution and streaming of applications from a centralized location to an isolated environment and the execution of those applications on the target device. An information...

CVE-2020-13998

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

CVE-2020-13998

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

Code injection

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

CVE-2020-13998

CVE-2020-13998 affects Citrix XenApp 6.5. A remote unauthenticated attacker can determine whether a user exists on the server because the 2FA error page only appears after a valid username is entered. Public sources in the connected documents confirm the issue as an information disclosure affecti...

CVE-2020-13998

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

CVE-2020-13998

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

PT-2020-13827 · Citrix · Citrix Xenapp

Name of the Vulnerable Software and Affected Versions: Citrix XenApp version 6.5 Description: The issue allows a remote unauthenticated attacker to determine whether a user exists on the server when two-factor authentication 2FA is enabled. This is because the 2FA error page is only displayed aft...

Citrix Hypervisor Security Updates

Description of Problem Modern CPUs contain random number generators that provide entropy randomness to the software running on those processors to use for purposes such as generating cryptographic encryption keys. Software can obtain entropy by using the RDRAND and RDSEED instructions. A security...

Citrix Systems Workspace App Elevation of Privilege Vulnerability (CNVD-2020-35945)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows. A local attacker could exploit the...

How to Validate Compatible Versions with AppLayering and Citrix Virtual Apps and Desktops

How to validate whether the AppLayering ELM Version is compatible with specific Citrix Virtual Apps and Desktop versions...

Citrix Systems Workspace App Elevation of Privilege Vulnerability

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows that stems from the program assigning...

CVE-2020-13885

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13885

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

Design/Logic Flaw

Citrix Workspace App before 1912 on Windows has Insecure Permissions which allows local users to gain privileges during the uninstallation of the application...

Path traversal

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...

CVE-2020-13884

Citrix Workspace App before 1912 on Windows has Insecure Permissions and an Unquoted Path vulnerability which allows local users to gain privileges during the uninstallation of the application...