Citrix Gateway和Citrix ADC 数据伪造问题漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

PT-2022-5429

Name of the Vulnerable Software and Affected Versions Citrix ADC formerly Citrix NetScaler Application Delivery Controller and Citrix Gateway formerly Citrix NetScaler Gateway affected versions not specified citrix application delivery controller firmware citrix gateway Description A security iss...

Citrix Gateway和Citrix ADC 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

[VPN Plugin] Transfer Login keeps Loading with Non-English language setting

In Citrix Gateway VPN environment, you may observe the following issue when "Transfer Login": After clicking "Transfer" on Client VPN plugin, the button keepsspinning loading and stuck. Logs investigation show the following clues: Problem can only be observed in Non-English language setting Plugi...

HTML5 app launch doesn't work via Netscaler after upgrading the CVAD setup

Upgrade Xendesktop from 7.15 Cu8 to 1912 CU5 or above Could connect externally through ADC Netscaler using HTML5 when on 7.15 but not with the latest codes Connecting to the machines using HTML5 via direct storefront works fine App launch via workspace app works fine though ADC as well Only while...

Metasploit Weekly Wrap-Up

JBOSS EAP/AS - More Deserializations? Indeed! Community contributor Heyder Andrade added in a new module for a Java deserialization vulnerability in JBOSS EAP/AS Remoting Unified Invoker interface for versions 6.1.0 and prior. As far as we can tell this was first disclosed by Joao Matos in his...

How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance

This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...

How to Manually Configure Certificate Trust in Web Interface for NetScaler

This article describes how to import a root Certificate Authority CA into the NetScaler's trusted certificate store using the CLI. Setting up the certificate trust is necessary when deploying Web Interface for NetScaler in Gateway Direct Mode with the Authentication Point set to Access Gateway: A...

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: 1192408 1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux...

Decrypt Citrix NetScaler Config Secrets

This module takes a Citrix NetScaler ns.conf configuration file as input and extracts secrets that have been stored with reversible encryption. The module supports legacy NetScaler encryption RC4 as well as the newer AES-256-ECB and AES-256-CBC encryption types. It is also possible to decrypt...

Citrix NetScaler SD-WAN Remote Code Execution (CVE-2017-6316)

A remote code execution vulnerability exists in Citrix NetScaler SD-WAN. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Unable to launch published apps through the Gateway, no errors

-The customer cannot launch apps when logging in to the NetScaler gateway -The applications enumerate but won't launch, the progress popup comes up and disappears with no errors...

Citrix SD-WAN and NetScaler Command Injection Vulnerability

Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance...

Citrix SD-WAN and NetScaler SQL Injection Vulnerability

Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection...

Citrix ADC Deprecation of Web Interface on NetScaler (WIonNS) Feature

“From 12.1.63.22, 13.0.82.45 and 13.1.4.43 release, Web Interface on NetScaler WIonNS has been deprecated and sites using Citrix ADC’s Web Interface for accessing Citrix XenApp and Citrix XenDesktop applications need to move to Citrix StoreFront” The following configurations will be deprecated...

How to add text message on Gateway logon page that AAA authentication enabled.

In AAA authentication profiled configured Gateway Virtual server, you may found the rewrite policy method to addsome texts on Netscaler Gateway logon page is no longer effective. This is because the portal layout mechanism is changed compared with basic authentication policy scenario. Before we g...

Secure Hub- Minimum required ciphers for connecting Xenmobile and NetScaler

Secure Hub- Minimum required ciphers for connecting Xenmobile and NetScaler...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX330728)

The remote Citrix ADC or Citrix NetScaler Gateway device is version 11.1.x prior to 11.1-65.23, 12.1.x prior to 12.1-63.22, 12.1-FIPS prior to 12.1-55.257, 13.0.x prior to 13.0-83.27, or 13.1.x prior to 13.1-4.43. It is, therefore, affected by multiple vulnerabilities: - Unauthenticated denial of...

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP NSIP in order to perform exploitation...

Unable to add Store in Native Workspace/Receiver App from External Machines

On adding Store error "Your account cannot be added" or "Could not detect the specific account" appears On Storefront no errors in event viewer Wireshark trace on NetScaler shows, NetScaler senta request to Storefront server for "/Agservices/Discover", storefront server returns "500 : Internal...