How to migrate Citrix Licensing Server component

1. Migrating Citrix Licensing Server component from one server to another server 2. Updating Citrix products to use the new licensing server without any production impact...

Citrix SD-WAN Security Update

Description of Problem Multiple denial of service vulnerabilities have been identified in the Citrix SD-WAN Appliance and Citrix SD-WAN Center Management Console. These vulnerabilities could permit a remote attacker to cause a denial of service by causing a host crash or by causing reduced servic...

StoreFront Cannot Complete your request - Access is denied. Contact your system administrator. - No endpoint listening at net.pipe

StoreFront event log shows Access is denied. Contact your system administrator. System.ServiceModel.EndpointNotFoundException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 There was no endpoint listening at net.pipe://localhost/Citrix/Authentication/Win32...

Collect a complete memory dump on a MCS (non-persistent) machine on XenServer (Citrix Hypervisor)

This article outlines the steps to collect complete memory dump on a MCS non-persistent machine on XenServer Citrix Hypervisor. Often we are not able to get the memory dump in instances where MCS provisioned VDAs show behaviors like unresponsiveness/hang. The reason being the machine fails to sav...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

Design/Logic Flaw

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

CVE-2019-13608

Citrix StoreFront Server is affected by CVE-2019-13608: XML External Entity (XXE) processing vulnerability present in StoreFront versions before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000). The issue enables XXE attacks, with potential impact including reading arbit...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

Citrix SD-WAN Center Unauthenticated Remote Command Injection

The remote Citrix SD-WAN Center is affected by a remote command injection vulnerability due to improper sanitization of user-supplied input in the ping action of DiagnosticController. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP request, to execute arbitrary...

CVE-2019-13608

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Citrix Systems StoreFront Server XML External Entity Injection Vulnerability

Citrix Systems StoreFront Server is an enterprise application store from Citrix Systems USA. The product focuses on providing users with an interface to remotely access XenDesktop and XenApp virtual desktops and applications. An XML external entity injection vulnerability exists in Citrix Systems...

CVE-2019-13608: Improper Restriction of XML External Entity Reference

Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 3.12.4000, and 7.6 LTSR before CU8 3.0.8000 allows XXE attacks...

How to Upgrade to License Server 11.x on Windows 2008

This article describes how to upgrade Citrix License server to 11.10 and 11.11.1 on a Windows 2008 Server...

Cryptographic Update in Citrix Workspace App for Android

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Objective This feature is an important change to the secure communication protocol. Cipher suites wi...

CVE-2019-13608 - XML External Entity (XXE) Processing Vulnerability in Citrix StoreFront Server

Description of Problem An XML External Entity XXE processing vulnerability has been identified in Citrix StoreFront Server that could allow an unauthenticated attacker to retrieve potentially sensitive information from the server. This vulnerability has been assigned the following CVE number: •...

PT-2019-6105

Name of the Vulnerable Software and Affected Versions Citrix StoreFront Server versions prior to 1903 Citrix StoreFront Server 7.15 LTSR versions prior to CU4 3.12.4000 Citrix StoreFront Server 7.6 LTSR versions prior to CU8 3.0.8000 Description The issue is related to incorrect restriction of XM...

Error Code 42B when using Citrix Gateway Native OTP authentication in Citrix Workspace app for Android upgrade

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The following error message appears even after upgrading to the latest version of Citrix Workspace...

Citrix Security Acknowledgements

Citrix would like to thank security researchers who have worked with us to secure Citrix products and services. 2019 Vahagn Vardanian Mohammed Israil Nicholis du Toit Archit Garg of Careem Ismail Tasdelen Andrea Pessione of SKIT Cyber Security Armando Huesca of SKIT Cyber Security Asher Bin Khali...