Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Dojo Toolkit

Summary Multiple vulnerabilities in Dojo Toolkit used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID: CVE-2020-5259 DESCRIPTION: Dojo dojox could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By adding or...

Check Point Identity Agent Arbitrary File Write

Advisory: Privileged File Write Description =========== The Check Point Identity Agent allows low privileged users to write files to protected locations of the file system. Details ======= Advisory ID: usd-2021-0005 Product: Check Point Identity Agent Affected Version: R81.018.0000 Vulnerability...

Check Point Identity Agent Arbitrary File Write Vulnerability

Check Point Identity Agent Arbitrary File Write Vulnerability Description =========== The Check Point Identity Agent allows low privileged users to write files to protected locations of the file system. Details ======= Advisory ID: usd-2021-0005 Product: Check Point Identity Agent Affected Versio...

Keyboard Input Fails in Citrix Session from Receiver for Mac with OSX 10.9.5

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. In a Citrix session, keyboard is unresponsive from Receiver for Mac with OSX 10.9.5...

Error: "You cannot add apps at this time" on Receiver StoreFront

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Domain users receive the following error after logging in using Receiver for Website : “You cannot a...

Citrix Hypervisor Security Update

Description of Problem Two security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. These issues affect all currently supported versions of Citrix Hypervisor up to and...

NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN Software 11.2.X and 11.3.X Releases

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN Software 11.2.X and 11.3.X Releases. The tables below explain the Citrix SD-WAN software lifecycle management milestones as well as important information regarding dates and options during this period. Citrix SD-WAN...

Troubleshooting ICA Session Performance

Citrix Technical Support often receives inquiries regarding the performance or the responsiveness of sessions. This article assumes the ICA session has started and has not been disconnected. CTX708444 – Configuring TCP KeepAlive Values to Improve WAN Links and ICA KeepAlives to Place ICA Session ...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified that, collectively, may allow privileged code running in a guest VM to cause the host to crash or to become unresponsive. These issues have the following CVE identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions...

Security Bulletin: IBM InfoSphere Information Server is affected by an unescaped string injection in Dojo Toolkit

Summary An unescaped string injection vulnerability in Dojo Toolkit that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID: CVE-2018-15494 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

Citrix Secure Mail for Android Security Update

Description of Problem Vulnerabilities have been discovered in CitrixSecure Mailfor Androidthatcould allowunauthorisedaccessto datawithinCitrix Secure Mail. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|--- CVE-2020-8274|...

PVS Accelerator - For Citrix Hypervisor 8.2

Who Should Install This Update? This PVS Accelerator update is for customers who use the PVS Accelerator provided with Citrix Hypervisor 8.2. It constitutes the following deliverable: File Name| CitrixHypervisor-8.2.0-pvsaccelerator.iso ---|--- Description| This file updates the PVS Accelerator...

XenCenter 8.1.2 - For Citrix Hypervisor 8.1

Who Should Install This Update? This XenCenter update is for customers who use XenCenter as the management console for Citrix Hypervisor 8.1.0 or an earlier CR. It constitutes the following deliverable: File Name| XenCenter.msi ---|--- Description| This file updates the XenCenter installation on...

Citrix SDWAN Center Security Update

Description of Problem Multiple vulnerabilities have been discovered in Citrix SD-WAN Center that, if exploited, could allow an unauthenticated attacker with network access to SD-WAN Center to perform arbitrary code execution as root. These vulnerabilities have the following identifiers: CVE|...

Citrix ADC and Citrix Gateway Security Update (CVE-2019-0140)

Description of Problem A vulnerability has been identified affecting Citrix Application Delivery Controller ADC formerly known as NetScaler ADC, and Citrix Gateway, formerly known as NetScaler Gateway, platforms which could result in privilege escalation via layer 2 network access on all network...

Citrix Hypervisor Security Update

Description of Problem Two issues have been identified in Citrix Hypervisor that may, if exploited, allow privileged code in an HVM guest VM to compromise or crash the host. These issues only apply in specific configurations; furthermore, Citrix believes that there would be significant difficulty...

CVE-2019-11550 - Citrix SD-WAN Security Update

Description of Problem An information disclosure vulnerability has been identified in the Citrix SD-WAN Appliance. This vulnerability could allow an unauthenticated attacker to perform a man-in-the-middle attack against management traffic. The vulnerability has been assigned the following CVE...

CVE-2014-8580 - Authentication Flaw in Citrix NetScaler Application Delivery Controller and NetScaler Gateway Could Result in Unauthorised Access to Network Resources

Description of Problem An authentication flaw has been identified in certain configurations of Citrix NetScaler ADC and NetScaler Gateway that could allow an authenticated user to obtain unauthorised access to network resources for another authenticated user. This flaw affects the following...

MetaFrame Password Manager "reveal password" policy bypass

Description of Problem Citrix MetaFrame Password Manager allows administrators to control which users can view their own secondary passwords. Versions 2.5 and earlier allow users to view their secondary passwords even if they should be prohibited from doing so by the administrator defined policy...

Crash Reporter Utility for Citrix Virtual Apps and Desktops

About This Release This is an early technical preview release v1.0.0.2 of the Crash Reporter utility. This release has not been tested extensively and is not supported. Please send any feedback using the link in Contact Information section. Where to download ? Certain legacy Citrix tools are now...