CVE-2017-5572

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

CVE-2017-5573

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

CVE-2017-5572

CVE-2017-5572 affects Citrix XenServer (Linux Foundation xapi) up to version 7.0. An authenticated read-only administrator can corrupt the host database, as described in multiple sources. CVSS data from NVD indicates network-based access with low complexity and partial integrity/availability impa...

CVE-2017-5573

CVE-2017-5573 affects Citrix XenServer (Linux Foundation xapi). An authenticated read-only administrator can cancel tasks of other administrators. The connected documents describe the vulnerability and impact but do not provide root-cause details, affected versions beyond XenServer up to 7.0, exp...

CVE-2017-5573

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

Microsoft Certificate Authority Configuration for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management in MSCA...

StoreFront 3.5 to 3.8 upgrade fails.

In the MSI logs we get following error: An error occurred creating the configuration section handler for citrix.deliveryservices/protocolTransitionSettings: Could not load file or assembly 'Citrix.DeliveryServices.ProtocolTransition.Configuration, Version=2.6.0.0, OR An error occurred creating th...

Citrix XenServer Multiple Security Updates (CTX220112)

Several security issues have been identified within Citrix XenServer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Using a SafeNet Network HSM to protect the Citrix FAS Authorization (RA) Key

Introduction Citrix Federated Authentication Servers FAS are security-critical and should be treated like Domain Controllers. Protecting the FAS server’s Authorization / Registration Authority RA key is one of the measures that help protect FAS server integrity. We published an official eDocs pag...

Citrix XenServer Multiple Vulnerabilities (CTX219378)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in x86 instruction CMPXCHG8B due to legacy operand size overrides not being properly ignored when handling prefixes. A guest attacker...

How to set the keyboard to automatically pop up while opening the app with Receiver for iPad

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Users need to be able to access the keyboard in Receiver. We would like this function to come up...

Director Error "Cannot retrieve data. Data source unresponsive or reported an error".

The following error is seen in the event viewer of the Director server: Log Name: Application Source: Citrix Director Service Date: 1/20/2017 11:05:33 AM Event ID: 5 Task Category: None Level: Error Keywords: Classic User: N/A Computer: CtxDirector.RepLab.Local Description: The description for...

Citrix Receiver refreshes and comes to foreground of the screen

Once Receiver is configured with URL it refreshes automatically. Change in refresh rate of the Receiver interrupts users when working on other apps...

Receiver install error "The requested operation has failed"

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Unable to install Citrix receiver on a new computer. Error "The requested operation has failed"or "A...

Application Launch Fails Intermittently With Event ID 7

User launches published desktop via Storefront and can see the DesktopViewer. Desktop Viewer closes after a few seconds and logs the following error in the EventLog: Event ID: 1050 Citrix Desktop service connection validation failed on domain "for user" for reason "Deny" followed by Event ID7: "I...

Citrix Provisioning Services Remote Code Execution and Information Disclosure Vulnerabilities

Citrix Provisioning Services is prone to multiple remote code execution RCE and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Citrix Provisioning Services Information Disclosure Vulnerability

Citrix Provisioning Services enables the creation of a set of images that use streaming technology to transport physical and virtual servers, reducing storage requirements and enabling fast, consistent and reliable application deployment. An information disclosure vulnerability exists in Citrix...

How to Set Up StoreFront with XenMobile Cloud For Providing a Unified App Store within Citrix Secure Hub

This article describes how to set up StoreFront with XenMobile Cloud for providing a Unified App Store within Citrix Secure Hub. Background This article provides instructions on how to provide a unified app store for mobile, Web/SaaS, and Windows applications to end users within Secure Hub...

Citrix Provisioning Services 7.x < 7.12 Multiple Vulnerabilities (CTX219580)

The version of Citrix Provisioning Services running on the remote Windows host is either 7.x prior to 7.12 or 7.6 LTSR prior to 7.6.4 LTSR. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to an overflow condition caused by improper...

Citrix Provisioning Services Arbitrary Code Execution Vulnerability

Citrix Provisioning Services enables the creation of a set of images that use streaming technology to transport physical and virtual servers, reducing storage requirements and enabling fast, consistent and reliable application deployment. An arbitrary code execution vulnerability exists in Citrix...