CVE-2024-6148

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

CVE-2024-6148

CVE-2024-6148 affects Citrix Workspace app for HTML5 prior to version 2404.1. The Citrix CTX678037 security bulletin documents two vulnerabilities: (1) bypass of GACS Policy Configuration settings, and (2) redirection of users to a vulnerable URL (CVE-2024-6149). The issue originates in the HTML5...

CVE-2024-6148

Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5...

CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows...

CVE-2024-6286

CVE-2024-6286 affects Citrix Workspace app for Windows. The vulnerability is a Local Privilege Escalation allowing a low-privileged user to gain SYSTEM privileges. Affected versions are Citrix Workspace app for Windows before 2403.1 (Current Release) and before 2402 LTSR (Long Term Service Releas...

Citrix Systems Workspace App Security Vulnerability

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App versions prior to 2404.1 that originates from bypassing the GACS policy...

Citrix Systems Workspace App Security Vulnerability

Citrix Systems Workspace App is an application used to provide secure access to applications, desktops, and data by Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Workspace App versions prior to 2403.1 that stems from the presence of a local elevation of privilege that...

Citrix Systems Workspace App Security Vulnerability

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems, Inc. A security vulnerability exists in Citrix Systems Workspace App versions prior to 2404.1 that originates from redirecting users to a vulnerable U...

Citrix Workspace app for HTML5 Security Bulletin CVE-2024-6148 and CVE-2024-6149

Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for HTML5. Refer to below for further details: Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for HTML5. Citrix Workspace app for HTML5...

PT-2024-5729 · Citrix · Citrix Workspace App For Html5

Name of the Vulnerable Software and Affected Versions: Citrix Workspace app for HTML5 affected versions not specified Description: The issue is related to a bypass of GACS Policy Configuration settings in the Citrix Workspace app for HTML5. This is due to incorrect default permissions. Exploitati...

CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

DEBIAN-CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

Plasma Workspace Security Vulnerability

Plasma Workspace is a KDE GitHub Mirror open source application. It is used for various components required to run Plasma-based environments. A security vulnerability exists in Plasma Workspace versions prior to 5.27.11.1, and 6.x versions prior to 6.0.5.1, which stems from the fact that KSmserve...

CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

Icons may intermittently disappear in CWA for Mac after upgrading to version 2405

Icons may intermittently disappear in Citrix Workspace for Mac after upgrading from version 2402 or 2402.10 to version 2405...

CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

CVE-2024-36986

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privileged user to bypass SPL safeguards for risky commands in the Analytics...

CVE-2024-36986 Risky command safeguards bypass through Search ID query in Analytics Workspace

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privileged user to bypass SPL safeguards for risky commands in the Analytics...