How to create an SSL Listener/Server Certificate for Citrix Endpoint Management

This knowledge base article guides users through the process of generating an SSL/Server certificate for Endpoint Management 10.x on a Windows server...

Citrix Secure Mail - Customized SSL, Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Citrix Secure Mail published at the 'play' market has multiple vulnerabilities...

How to Configure CEIP / Call Home for the Citrix License Server

Note: This feature is only available in the Citrix License Server 11.14.0.1 Build 19005 or later. Citrix Customer Experience Improvement Program CEIP is now enabled by default during License Server installation. Previously customers had to configure CEIP settings by editing CITRIX.opt or using...

Citrix XenServer Multiple Security Updates (CTX220771)

Two security issues have been identified within Citrix XenServer. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Citrix Secure Hub - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Citrix Secure Hub published at the 'play' market has multiple vulnerabilities...

Citrix Secure Web - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Citrix Secure Web published at the 'play' market has multiple vulnerabilities...

Citrix NetScaler Application Delivery Controller and Gateway Information Disclosure Vulnerability

NetScaler Application Delivery Controller ADC and NetScaler Gateway formerly known as Citrix Access Gateway Enterprise Edition are both products of Citrix Systems, USA. NetScaler ADC is a service and application delivery solution Application Delivery Controller; NetScaler Gateway is a secure remo...

Error When Adding New Provisioned Machines to the Machine Catalog in Studio

Error when adding new provisioned servers to the machine catalog - Error stated the following: "The formatter threw an exception while trying to deserialize the message: There was an error while trying to deserialize parameter http://tempuri.org/:records. The InnerException message was 'Invalid...

Citrix Store Front MMC console crashes with RSA Authentication Agent 1.0 installed.

Even after uninstalling the RSA Authentication Agent 1.0 we get following error in event viewer logs: Error while creating the Citrix StoreFront Snap-in. Microsoft.Practices.Unity.ResolutionFailedException: Resolution of the dependency failed, type =...

Secure Hub Continuously Prompts for Citrix PIN and Active Directory Password

Secure Hub continuously prompts for domain password on Android devices. Even though we have a Citrix PIN configured for all devices, we are required to put in our full domain password to authenticate...

How to Integrate Citrix Gateway with StoreFront for Access with Wyse Clients

This article describes how to integrate Citrix Gateway with StoreFront for access with Wyse clients...

How to Configure SAML- Introduction?

SAML is an XML-based open standard which enables authentication of users across products or organizations. SAML is used by identity providers such as Google and by identity and authentication products such as Microsoft AD FS, Ping Identity, CA SiteMinder and more. Citrix customers wish to use...

Citrix License Server for Windows and License Server VPX Open Redirect Vulnerability

Citrix License Server for Windows and License Server VPX are both products of Citrix Systems. The former is a Windows-based authentication server and the latter is an authentication server appliance. An open redirection vulnerability exists in Citrix License Server for Windows and License Server...

Error: "The Gateway has EPA enabled, which is not supported on iOS devices" on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when logging on to iOS Receiver: The Gateway has EPA enabled, which...

Citrix Guidelines for Antivirus Software Configuration for Citrix Profile Management

This article provides guidelines for configuring antivirus software in environments using Citrix Profile Management Technology .These antivirus guidelines are not vendor-specific and are independent of the version of Citrix Profile Management deployed, except where explicitly stated. For Citrix...

Session fixation

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

CVE-2017-5933

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

CVE-2017-5933

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

CVE-2017-5933

CVE-2017-5933 affects Citrix NetScaler ADC and NetScaler Gateway. Affected: NetScaler ADC/Gateway 10.5 before Build 65.11; 11.0 before Build 69.12/69.123; 11.1 before Build 51.21. Issue: random GCM nonces enabling marginally easier nonce reuse attacks that could let remote attackers obtain the GC...

CVE-2017-5933

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...