Locally cached profiles not getting deleted at User logoff from the VDA

Locally cached user profiles does not get deleted at user logoff. User gets a temp profile at next consecutive login...

FSLogix | Blank Desktop icons and start menu icons are being displayed

When launching published desktops using FSLogix profiles, we observe that the desktop icons are displayed with a blank icon. When trying to open start menu within the published desktop session, we observe blank icons for the start menu tiles...

HOW TO | New network printers are not saving after re-logon

• The users are able to connect and add their network printers to their VDI sessions. However, after logoff the printer settings are not being retained within the user profile. • We would like to retain the network printer within the profile so that it is available for all subsequent logins...

How to delete profile at logoff without profile saved on user store

Citrix Profile Mangement is often used with a shared storage, but some environments prevent the using of shared storage, and also want to use the function of delete locally cached profiles at logff in UPM. This article tells how to achieve this goal...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

Cross site scripting

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

JetBrains TeamCity prior to 2023.05.3 is vulnerable to a stored XSS flaw in Cloud Profiles configuration (CVE-2023-41248). Affected product/version: TeamCity before 2023.05.3. Root cause: stored XSS during Cloud Profiles setup. Impact: potential user-impact via crafted input; CVSS base metrics in...

PT-2023-27867 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.3 Description: The issue allows for stored XSS during Cloud Profiles configuration. Recommendations: For versions prior to 2023.05.3, update to version 2023.05.3 or later to resolve the issue...

CVE-2023-41248: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A cross-site scripting vulnerability exists in JetBrai...

编号撤回

libeconf is a highly flexible and configurable library for parsing and managing key=value profiles. This CVE number has been withdrawn...

MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation

Description The plugin does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts. 1. Visit the Profiles Settings page for the plugin: MS LMS LMS Settings Profiles 2. Ensure that "Disable Instructor...

Citrix profiles are not getting deleted on log off

Citrix profile management is used to manage the user profiles Local profile on the VDA is not deleted on log off...

Due to revert found during testing it would be wise to implement a rollback and re-whitelist should it be needed

Lines of code Vulnerability details Impact During testing with the Mainnet fork for the migration testing. We needed to make a distinction between V1 Profiles and V2 profiles within the test code, but this is not so in the standard V2 code, and may cause unforeseen issues after the upgrade. The V...

Migration of Profiles can fail due to existance of same handle

Lines of code Vulnerability details Impact Some profiles cannot be migrated to V2 if their handle tokenId has already been minted. Proof of Concept A handle can be minted in the LensHandles contract before a profile that would have the same handle is migrated from V1. When the profile attempts to...

Privacy Violation: Unauthorized Access to Blocking Status of Profiles

Lines of code Vulnerability details Impact The smart contract contains a critical privacy violation that allows unauthorized users to access the blocking status of profiles. The isBlocked function, which is intended to check if one profile is blocked by another, lacks proper access controls and...

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti Endpoint Manager Mobile EPMM, previously branded MobileIron Core contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information PII such as names, phone...