Design/Logic Flaw

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

CVE-2014-3798

The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service guest OS crash via a crafted Ethernet frame...

CVE-2014-3798

The CVE concerns Citrix XenServer Windows Guest Tools (XenServer Tools) for Windows guests, with vulnerability in the xenvif-facing handling that allows a remote, unauthenticated attacker to crash the guest OS by sending specially crafted Ethernet frames. Affected versions include XenServer 6.2 S...

Workspace app for ios default display settings

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. What is the default setting for Workspace app for iOS on iPhones? Display settings are not all the...

StoreFront 1906.1.0.27 upgrade and installation issues

The following issues have been discovered with StoreFront1906.1.0.27concerning upgrading and uninstalling: 1. If you attempt to upgrade to StoreFront 1906 from StoreFront 3.7, or from a version of StoreFront that was upgraded from StoreFront 3.7, the upgrade fails. WSP-4386 2. Uninstallation of...

Citrix Hypervisor Security Update.

Description of Problem A vulnerability has been found in Citrix Hypervisor formerly Citrix XenServer that may allow an unauthenticated attacker with the ability to send traffic to a host over a management or storage network to cause the host to crash. This vulnerability is identified as: •...

Updates to Citrix Workspace app installer

Objective This update is applicable to Citrix Workspace app 1904 and above Citrix Workspace app installer starts certain processes during the installation of the software. Citrix Workspace app 1904 for Windows onwards certain changes have been made to the process handling in the installer. Althou...

Citrix SD-WAN Center/Appliance Multiple Vulnerabilities

Citrix SD-WAN Center is a centralized management system for configuring, monitoring, and analyzing all Citrix SD-WAN devices on the WAN. Multiple vulnerabilities exist in Citrix SD-WAN Center/Appliance that can be exploited by attackers to obtain sensitive information...

Citrix SD-WAN Appliance < 10.2.3 Unauthenticated Blind SQL Injection

The remote Citrix SD-WAN Appliance is affected by an SQL injection vulnerability due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this issue to inject or manipulate SQL queries in the back-end database, resulting in the manipulation of arbitrary...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

Improper access control

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has an Improper Access Control vulnerability affecting the web console, potentially enabling privilege escalation and remote code execution. The issue affects AppDNA versions up to and including 7.18. Mitigation: upgrade to 7 1906.1.0.472 or newer and configure...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

Citrix ICA Unauthorized Application

...

Citrix Application Delivery Management Agent Information Disclosure

The remote Citrix Application Delivery Management ADM agent is affected by an information disclosure vulnerability due to improper access control in the management interface. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP request, to disclose potentially...

Citrix Systems AppDNA Access Control Error Vulnerability

Citrix Systems AppDNA is an application management, migration tool from Citrix Systems USA. An Access Control Error vulnerability exists in Citrix Systems AppDNA versions prior to 7 1906.1.0.472, which arises from a networked system or product that does not properly restrict access to resources...

Troubleshooting HDX Optimization for Microsoft Teams

This is a Live article - updated frequently with the latest info and known issues ------------------------------------------------------------------------------------------------------------------------------------------------- Recommended Teams version :latest version. Update history for...

Workspace App for mobile devices not showing apps - no apps available at this time - error 451

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. - iOS throws "No apps available at this time"after login attempt -Android throws Error code 451 afte...

CVE-2019-11634 - Improper Access Control Vulnerability in AppDNA

Description of Problem A vulnerability has been identified in AppDNA that could result in access controls not being enforced when accessing the web console potentially allowing privilege escalation and remote code execution. This vulnerability has been assigned the following CVE number: •...