Citrix NetScaler Gateway and Citrix Application Delivery Controller Buffer Overflow Vulnerability

Citrix Systems NetScaler Gateway and Citrix Application Delivery Controller ADC Citrix NetScaler Gateway and Citrix Application Delivery Controller are both products of Citrix Systems NetScaler Gateway and Citrix Application Delivery Controller are both products of Citrix Systems, Inc.Citrix...

Citrix ADC and Citrix NetScaler Gateway buffer overflow vulnerability (CTX249976)

The remote Citrix ADC or Citrix NetScaler Gateway device is affected by a buffer overflow vulnerability. An attacker may be able to leverage this vulnerability which will result in a denial of service in a specific configuration. Please refer to advisory CTX249976 for more information. C Tenable...

Citrix Hypervisor Security Update

Description of Problem A number of security issues have been identified in certain CPU hardware that may allow unprivileged code running on a CPU core to infer the value of memory data belonging to other processes, virtual machines or the hypervisor that are, or have recently been, running on the...

How to enable debug logging for Citrix WEM Cloud Authentication Service and Citrix WEM Cloud Messaging Service on Cloud Connectors

The Workspace Environment Management WEM service is a Citrix Workspace product. Similar to on-premise WEM, the WEM Service Agent needs to connect to the WEM service Broker. In order to do so, the WEM Service Agent must first request the WEM service Broker's URL and a service key from a Citrix Clo...

XenServer Hardware Compatibility List Explained

This article provides an understanding of the Hardware Compatibility List HCL for Citrix Hypervisor and XenServer. This article also contains information about how products get qualified for inclusion in the HCL and what listing in the HCL represents from a support perspective. Background The...

CVE-2019-7218

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

CVE-2019-7217

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

CVE-2019-7218

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

Cross site request forgery (csrf)

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

Authentication flaw

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

CVE-2019-7218

Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...

CVE-2019-7218

Citrix ShareFile vulnerable to a downgrade of authentication from two-factor to one-factor for versions before 19.23. An attacker who has access to the victim’s OTP token or authenticator app could bypass the username/password step and log in with username/OTP only. The issue affects the 2FA logi...

CVE-2019-7217

Summary: CVE-2019-7217 affects Citrix ShareFile prior to version 19.12, enabling user enumeration through OTP-check endpoints without authentication. Affected component appears to be the authentication/OTP verification flow, where server responses disclose whether a given username exists. The cit...

CVE-2019-7217

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

CVE-2019-12044 - Buffer Overflow Vulnerability in Citrix ADC and Citrix NetScaler Gateway

Description of Problem A buffer overflow vulnerability has been identified in Citrix ADC and Citrix NetScaler Gateway which could possibly result in a denial-of-service in a specific configuration. This vulnerability has been assigned the following CVE number: • CVE-2019-12044: Buffer overflow...

Failed to launch session "session_name". Error code: 2519 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article is intended for Citrix administrators and technical teams only. Non-admin users must...

Failed to launch session "session_name". Error code: 2523 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

Failed to launch session "session_name". Error code: 2524 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

PT-2019-6081

Name of the Vulnerable Software and Affected Versions Citrix Workspace App versions prior to 1904 for Windows Citrix Receiver for Windows affected versions not specified Description The issue is related to incorrect access control in the Citrix Workspace App, which can be exploited by a remote...

Failed to launch session "session_name". Error code: 2520 on Citrix Workspace App During App/Desktop Launch

The following error is returned by the Citrix Gateway to Citrix CWA app when application/desktop launch fails: Failed to launch session . Error code: 2520...