Citrix ShareFile storage zones controller security update

Description of Problem A security issue has been identified in the Citrix ShareFile storage zones controller which, if exploited, would allow an unauthenticated attacker to remotely compromise the storage zones controller. The issue has been given the following identifier: CVE-ID | Description |...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Dojo Toolkit

Summary Multiple vulnerabilities in Dojo Toolkit used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2020-5259 DESCRIPTION: Dojo dojox could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By adding or...

Check Point Identity Agent Arbitrary File Write

Advisory: Privileged File Write Description =========== The Check Point Identity Agent allows low privileged users to write files to protected locations of the file system. Details ======= Advisory ID: usd-2021-0005 Product: Check Point Identity Agent Affected Version: R81.018.0000 Vulnerability...

Check Point Identity Agent Arbitrary File Write Vulnerability

Check Point Identity Agent Arbitrary File Write Vulnerability Description =========== The Check Point Identity Agent allows low privileged users to write files to protected locations of the file system. Details ======= Advisory ID: usd-2021-0005 Product: Check Point Identity Agent Affected Versio...

Keyboard Input Fails in Citrix Session from Receiver for Mac with OSX 10.9.5

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. In a Citrix session, keyboard is unresponsive from Receiver for Mac with OSX 10.9.5...

Error: "You cannot add apps at this time" on Receiver StoreFront

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Domain users receive the following error after logging in using Receiver for Website : “You cannot a...

Citrix Hypervisor Security Update

Description of Problem Two security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. These issues affect all currently supported versions of Citrix Hypervisor up to and...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 11.2.X and 11.3.X Releases

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 11.2.X and 11.3.X Releases. The tables below explain the Citrix SD-WAN software lifecycle management milestones as well as important information regarding dates and options during this period. Citrix SD-WAN...

Troubleshooting ICA Session Performance

Citrix Technical Support often receives inquiries regarding the performance or the responsiveness of sessions. This article assumes the ICA session has started and has not been disconnected. CTX708444 – Configuring TCP KeepAlive Values to Improve WAN Links and ICA KeepAlives to Place ICA Session ...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified that, collectively, may allow privileged code running in a guest VM to cause the host to crash or to become unresponsive. These issues have the following CVE identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions...

Security Bulletin: IBM InfoSphere Information Server is affected by an unescaped string injection in Dojo Toolkit

Summary An unescaped string injection vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

Citrix Secure Mail for Android Security Update

Description of Problem Vulnerabilities have been discovered in CitrixSecure Mailfor Androidthatcould allowunauthorisedaccessto datawithinCitrix Secure Mail. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|--- CVE-2020-8274|...

XenCenter 8.1.2 - For Citrix Hypervisor 8.1

Who Should Install This Update? This XenCenter update is for customers who use XenCenter as the management console for Citrix Hypervisor 8.1.0 or an earlier CR. It constitutes the following deliverable: File Name| XenCenter.msi ---|--- Description| This file updates the XenCenter installation on...

PVS Accelerator - For Citrix Hypervisor 8.2

Who Should Install This Update? This PVS Accelerator update is for customers who use the PVS Accelerator provided with Citrix Hypervisor 8.2. It constitutes the following deliverable: File Name| CitrixHypervisor-8.2.0-pvsaccelerator.iso ---|--- Description| This file updates the PVS Accelerator...

Citrix SDWAN Center Security Update

Description of Problem Multiple vulnerabilities have been discovered in Citrix SD-WAN Center that, if exploited, could allow an unauthenticated attacker with network access to SD-WAN Center to perform arbitrary code execution as root. These vulnerabilities have the following identifiers: CVE|...

Citrix ADC and Citrix Gateway Security Update (CVE-2019-0140)

Description of Problem A vulnerability has been identified affecting Citrix Application Delivery Controller ADC formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, platforms which could result in privilege escalation via layer 2 network access on all network...

Citrix Receiver Diagnostics Tool - For Windows

Citrix Receiver Diagnostics Tool for Windows Created Date: December 16, 2014 Updated Date:September 13, 2023 Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Description The Receiver...

MetaFrame Password Manager "reveal password" policy bypass

Description of Problem Citrix MetaFrame Password Manager allows administrators to control which users can view their own secondary passwords. Versions 2.5 and earlier allow users to view their secondary passwords even if they should be prohibited from doing so by the administrator defined policy...

LDAP authentication vulnerability in Access Gateway Advanced Access Control

Description of Problem If the Advanced Access Control option AAC of Access Gateway is configured to use LDAP authentication then it is possible for a user to logon without supplying valid credentials. This vulnerability only affects AAC Version 4.2 deployments that are using LDAP authentication;...

Vulnerability in Citrix Broadcast Server could result in SQL injection

Description of Problem A vulnerability has been identified in the Web-based management interface of Citrix Broadcast Server, a component of the Citrix Application Gateway, that could result in arbitrary SQL query execution. This vulnerability affects the following products: • Citrix Application...