How to determine the version of Citrix license server installed

This article describes how to determine the version of the Citrix license server...

Citrix NetScaler Nonce Generation Vulnerability (CTX220329)

A flaw has been identified in the GCM nonce generation functionality of Citrix NetScaler application Delivery Controller ADC and Citrix NetScaler Gateway that could result in the interception of session data. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from...

PT-2017-16768

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway versions 10.5 before Build 65.11 Citrix NetScaler ADC and NetScaler Gateway versions 11.0 before Build 69.12/69.123 Citrix NetScaler ADC and NetScaler Gateway versions 11.1 before Build 51.21...

CVE-2017-5933: Exposure of Sensitive Information to an Unauthorized Actor

Citrix NetScaler ADC and NetScaler Gateway 10.5 before Build 65.11, 11.0 before Build 69.12/69.123, and 11.1 before Build 51.21 randomly generates GCM nonces, which makes it marginally easier for remote attackers to obtain the GCM authentication key and spoof data by leveraging a reused nonce in ...

CVE-2017-5933 - Vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway GCM nonce generation

Description of Problem A flaw in NetScaler ADC and Gateway causes GCM nonces to be randomly generated, making it marginally easier for remote attackers to obtain the GCM authentication key and spoof data within a session. The following vulnerability has been addressed: CVE-2017-5933: Vulnerabilit...

How to Configure Certificate Based Authentication for Citrix Endpoint Management

The primary intent of this article is to provide steps on how an admin can enable certificate based authentication for Citrix Endpoint Management...

How to Configure Multiple Domains for Citrix Endpoint Management

The primary intent of this article is to provide steps on how to add additional domains in the Citrix Endpoint Management using Citrix Cloud Connector. This article is created assuming the first domain is already added to Citrix Endpoint Management...

Citrix XenServer Linux Foundation xapi Security Bypass Vulnerability

Citrix XenServer is a virtualization solution. A security vulnerability in Citrix XenServer Linux Foundation xapi allows remote attackers to exploit the vulnerability to submit a special request and corrupt the host database...

Multiple Vulnerabilities in Citrix Provisioning Services

Citrix Provisioning Services enables the creation of a set of images that use streaming technology to transport physical and virtual servers, reducing storage requirements and enabling fast, consistent and reliable application deployment. Citrix Provisioning Services is implemented with remote co...

How to Create Custom Android KeyStore for MDX App Wrapping

This article will guide the Citrix Endpoint Management admin in creating a custom keystore which will be used to sign the unsigned android apps using MDX toolkit and/or using MDX as a service...

Citrix XenServer Linux Foundation xapi Security Bypass Vulnerability (CNVD-2017-01230)

Citrix XenServer is a virtualization solution. A security vulnerability exists in Citrix XenServer Linux Foundation xapi, which allows remote attackers to exploit the vulnerability to submit a special request to cancel an administrator job...

VMware vSphere 6.5 - Citrix Known Issues

Citrix is committed to ensuring compatibility with the latest VMware hypervisor releases. VMware released vSphere 6.5 in Nov 2016and vSphere 6.5 Update 1 in Aug 2017. Basic compatibility testing has been performed between already released Citrix products and vSphere 6.5 / 6.5 update 1.As always, ...

Citrix XenServer Multiple Vulnerabilities (CTX220112)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM vulnerability exists in the NTP component due to an improperly implemented threshold limitation for the '-g' option. A...

HTTP Open Redirect Vulnerability in License Server

This article explains the steps required to apply the manual workaround for the issue described in CTX219885 – Open Redirect Vulnerability in Citrix License Server for Windows and License Server VPX. This article is available on our website at the following address:...

CVE-2017-5573

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

Design/Logic Flaw

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

CVE-2017-5572

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database...

Design/Logic Flaw

An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administrators...

CVE-2017-5573

CVE-2017-5573 affects Citrix XenServer (Linux Foundation xapi). An authenticated read-only administrator can cancel tasks of other administrators. The connected documents describe the vulnerability and impact but do not provide root-cause details, affected versions beyond XenServer up to 7.0, exp...

CVE-2017-5572

CVE-2017-5572 affects Citrix XenServer (Linux Foundation xapi) up to version 7.0. An authenticated read-only administrator can corrupt the host database, as described in multiple sources. CVSS data from NVD indicates network-based access with low complexity and partial integrity/availability impa...