83 matches found
CVE-2019-13609 - CRLF Vulnerability in Citrix License Server for Windows and VPX
Description of Problem A Carriage Return Line Feed CRLF injection vulnerability has been identified in Citrix License Server for Windows and VPX that could allow an unauthenticated attacker to bypass authentication and allow a malicious website to read or modify license server data of an existing...
How to Install and Configure License server VPX on Hypervisor
Note: Citrix Hypervisor formerly XenServer...
How to Allocate and Install Citrix NetScaler VPX Licenses
This document will provide a step-by-step guide on obtaining a Citrix NetScaler VPX license formerly ADC VPX. Requirements Contactmust be listed on company account withUnrestricted access...
Citrix NetScaler Gateway TLS Padding Oracle Vulnerability (CTX240139)
The remote Citrix NetScaler device is affected by a TLS padding oracle vulnerability. An attacker may be able to leverage this vulnerability to decrypt TLS traffic. Please refer to advisory CTX240139 for more information. Note appliances with all CBC-based ciphers disabled are not affected by thi...
Is AMD processor supported for provisioning VPX?
AMD processors are supported for provisioning Citrix ADC VPX on firmware release 13.1 and above. More details are available at the Docs page - https://docs.citrix.com/en-us/citrix-adc/current-release/deploying-vpx/deploy-vpx-faq.html...
Citrix ADC MPX/SDX with SSL Coleto Card Installed Fails
Customer may report that their: SVM and VPX eventually become unresponsive GUI access is unavailable for SVM and VPX SSH access only SVM reporting both the instances as Yellow Instance state-YellowOut of service message This issue can be validated by reviewing the following counters getting...
Citrix ADM does not detect VPX's of SDX after SDX is upgraded from 11.0 to 11.1 and higher versions
We see all the VPX instances on ADM before the upgrade. After SDX is upgraded from 11.0 to 11.1 or a higher version, all the VPX's of the SDX disappear from Citrix ADM. All the config related to those VPX's are lost too. This includes licensed vServers and User Group entities bound to that VPX on...
Server side request forgery (ssrf)
Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/readurl URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges...
CVE-2018-6186
CVE-2018-6186 affects Citrix NetScaler VPX through NS12.0 53.13.nc, enabling an SSRF attack via the /rapi/read_url URI by an authenticated user with a webapp account. The attacker can gain nsroot access and execute remote commands with root privileges. The issue is addressed by upgrading to Citri...
openSUSE Security Update : libvpx (openSUSE-2018-87)
This update for libvpx fixes one issues. This security issue was fixed : - CVE-2017-13194: Fixed incorrect memory allocation related to odd frame width bsc1075992. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
How to Collect Diagnostic Data by using the Command Line Interface on a WANOP
This article explains an alternative method for collecting Diagnostic Data by using the command line interface when the Graphical User Interface GUI is not accessible on a NetScaler SD-WAN WANOP appliance or WANOP VPX instance...
Error: "Backup Failure: Could not find required XVA" on NetScaler SDX
After upgrading NetScaler SDX and Netscaler VPX firmware to any newer version you will get daily notifications about backups failing: For Example the Log Message is as below: Local0.Error 10.xx.xx. svmevent: GMT : EVENT BACKUPFAILED : 127.0.0.1:BackupFailure: - Could not find required XVA for...
NetScaler 11.1 - Services flap on VPX/Interface hangs observed on XenServer
Services flaps on VPX/Interface hands observed on XenServer...
Password Management for SDX's and VPX's utilizing NMAS
To manage passwords and accounts from one centralized location...
NetScaler VPX on 11.1 Firmware Shows as VPX (1) in GUI when Using MAS Pooled Capacity Licensing
NetScaler GUI showing "NetscalerRemoteLicensedVirtualAppliance”. However, VPX instance is showing “License type” as Enterprise on GUI but the model ID was 1 i.e, VPX1...
Introduction to Citrix NetScaler SDX
Introduction to NetScaler SDX NetScaler SDX is a hardware-based Application Delivery Appliance for enterprise and cloud datacenters. It supports hosting of multiple NetScaler instances on a single hardware and can thus be used for the purpose of Multi-tenancy. NetScaler SDX Components 1. XenServe...
Heap Overflow Vulnerability in Citrix NetScaler Gateway (CVE-2017-7219)
After presenting my findings on the Swisscom router at the CybSecConference last year, I started looking for a new product to analyze. I quickly found that it’s possible to download virtual “demo” appliances of Citrix products, so I went on to download a Netscaler VPX, which at the time was at...
CVE-2017-5571
Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...
CVE-2017-5571
Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher aka Flex License Manager 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing...