Citrix XenServer Multiple Security Updates (CTX218775)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow malicious code running within a guest VM to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Wyse Zero Client Unable to Log On to StoreFront

Wyse Zero Clients are unable to log on to StoreFront. The following error is received: Start roaming account , Citrix Sign-On failed This issue occurs after rebooting one of the devices. The devices that are not yet rebooted are working without any issues...

When Launching an Application Internally via Netscaler User Receives Error: "Cannot Connect To The Citrix XenApp Server. There Is No Citrix XenApp Server Configured On The Specified Address"

With a NetScaler Gateway and StoreFront setup, while launching application users get following or similar errors: "Unable to launch your application. Contact your help desk with the following information. Cannot connect to the Citrix XenApp server. There is no Citrix XenApp server configured on t...

Users not Being Prompted for Citrix Receiver Upgrade Upon Logon to Storefront Web URL

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users not being prompted to upgrade Citrix Receiver when it is available...

Error: General error while launching applications through android receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Getting following error when launching applications through android receiver when coming through...

Some UPM or WEM Agent parameters may not be applied by the agent after switching from GPO settings to Workspace Environment Management settings.

Symptom 1: WEM Policy/Settings are not applying, and the old Citrix Profile Management items are applying instead Symptom 2: WEM Policies are not applying to the WEM Agents...

Error: "The Citrix WEM Agent Host Service service hung on starting", Netlogon prevented from starting

The Citrix WEM Agent Host Service fails to start with the following error message: "The Citrix WEM Agent Host Service service hung on starting." As a result,the Netlogon service is prevented from starting becauseNetlogon depends on the Citrix WEM Agent Host Service...

Error: "Logon failure: the user has not been granted the requested logon type at this computer."

Under certain circumstances, the Citrix WEM Agent log may show the following message: "Exception - VuemEnvironmentalSettingsController.ExecuteEntityPolicySettings : Logon failure: the user has not been granted the requested logon type at this computer."...

citrix.com XSS vulnerability

Vulnerable URL: https://www.citrix.com/partnercentral/login.html?errorCode=10411726;alert'OPENBUGBOUNTY'//779 Details: Description| Value ---|--- Patched:| Yes, at 06.02.2017 Latest check for patch:| 06.02.2017 17:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

CVE-2016-9111

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

CVE-2016-9111

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

Authentication flaw

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

CVE-2016-9111

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

CVE-2016-9111

CVE-2016-9111 (Citrix Receiver/Receiver Desktop Lock 4.5) is described as an authentication bypass allowing an attacker with physical access to a VDI to bypass login by temporarily disconnecting the LAN, i.e., a local access control issue. Public records note that the vendor reportedly could not ...

PT-2016-7656

Name of the Vulnerable Software and Affected Versions Citrix Receiver Desktop Lock version 4.5 Description The issue concerns incorrect access control mechanisms, potentially allowing an attacker to bypass authentication requirements. This could be achieved by leveraging physical access to a...

CVE-2016-9111: Improper Access Control

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

How to Configure Internal Beacon for Single FQDN on StoreFront

This article describes how to Configure Internal Beacon for Single FQDN on StoreFront. Background When you access any URL in Citrix Receiver, it tries to resolve both internal and external beacons. First it will resolve the internal beacon, followed by the external beacon, and then Citrix Receive...

Citrix Receiver/Receiver Desktop Lock Authentication Bypass Vulnerability

Citrix Receiver is a device that enables organizations to securely deliver virtual desktops and Windows, Web and SaaS applications over any user device with high performance, and in turn, effectively manage the large number of new devices entering the workspace. An authentication bypass...

Citrix Receiver / Receiver Desktop Lock 4.5 Authentication Bypass

thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix Vendor Homepage: https://www.citrix.com/ Software Link: Receiver ...

Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass

Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix...