Mattermost: Invitation Email is resent as a Reminder after invalidating pending email invites

An issue was found in Mattermost's workspace invite system that allowed unwanted users to join a workspace, leading to potential information disclosure. The vulnerability was caused by the lack of an option to cancel an invite, which could be exploited by an attacker to join a workspace even if t...

4 best practices to implement a comprehensive Zero Trust security approach

Today’s threat actors don’t see barriers, they see opportunities. As the old firewalls protecting the corporate network become obsolete amid the rush to adopt a hybrid workspace, implementing Zero Trust security has become an imperative across all sectors, both public and private. During this tim...

GHSA-7W2W-FWPF-9M4H Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure

Jenkins Pipeline: Deprecated Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same workspace directory for all checkouts of Pipeline libraries with the same name regardless of the SCM being used and the source of the library configuration. This allows attackers with Item/Configure...

The vulnerability of the IBM Planning Analytics and IBM Planning Analytics Workspace software lies in the incorrect limitation of the path name to the restricted access catalog, allowing a perpetrator to execute arbitrary code.

The vulnerability of IBM Planning Analytics’ software is related to incorrect restrictions on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Incoming audio issue on Microsoft Teams optimization for CWA Chrome OS

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet the below conditions are likely to see the issue are on Citrix Workspace app for Chrome OS AND have enabled Microsoft Teams optimization...

Incoming audio issue on Microsoft Teams optimization for CWA HTML5

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet below conditions are likely to see the issue are on Citrix Workspace app for HTML5 AND have enabled Microsoft Teams optimization...

8x8 Bounty: jaas.8x8.vc: Removed users can still have READ/WRITE access to the workspace via different API endpoints

An improper access control vulnerability was discovered in jaas.8x8.vc, where removed users could still have READ/WRITE access to the workspace via different API endpoints, if they were logged in and saved their session cookies. The issue was resolved by fixing the session management...

Session getting lost after few minutes if Citrix Workspace App for iOS is not running in the foreground

When launching a VDI session from an iOS device, if Citrix Workspace App for iOS CWA is not always on the front, then the session will be disconnected and lost after 5 minutes. End users would have to download a new ICA file again...

CVE-2022-21825

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...

CVE-2022-21825

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...

CVE-2022-21825

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...

Improper access control

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...

CVE-2022-21825

CVE-2022-21825 affects Citrix Workspace App for Linux 2012–2111 when App Protection is installed. The issue is described as an improper access control vulnerability that enables local privilege escalation by a local user. The vulnerability is specifically tied to App Protection; Citrix’s advisory...

CVE-2022-21825

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access to applications, desktops, and data from Citrix Systems, Inc. A security vulnerability exists in the Citrix Systems Workspace App that stems from an Access Control Error vulnerability in Citrix Workspace with App...

PT-2022-15158 · Citrix · Citrix Workspace App For Linux

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App for Linux versions 2012 through 2111 Description: An Improper Access Control issue exists in Citrix Workspace App for Linux with App Protection installed, allowing an attacker to perform local privilege escalation...

Citrix Workspace App for Mac 2111: Zoom VDI Plugin and Cisco JVDI plugin failed to work after CWA for Mac 2111 upgrade

After upgrade to CWA for Mac 2111, Zoom VDI plugin and Cisco Jabber JVDI plugin failed to connect Zoom VDI and Cisco Jabber in Citrix Session...

Citrix Workspace for Linux on Linux Mint : HDX optimization fails for MS Teams published App

MS Teams do not show as HDX Optimized status in MS Teams- About-Version. Microphone and Camera fail to get redirected...

Citrix Workspace App for iOS 22.1.0.5 on devices managed using SecureHub crashes during Application Launch

Citrix Workspace App 22.1.0.5 on iOS devices managed by Secure Hub crashes during Application launch. As of now ,this problem occurs with both on Prem and Cloud CVAD store and XenMobile...

Mageia: Security Advisory (MGASA-2021-0411)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...