Deserialization of untrusted data

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

CVE-2021-25758

In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution...

JetBrains IntelliJ IDEA 代码问题漏洞

Jetbrains IntelliJ IDEA is a Czech JetBrains Jetbrains company's set of integrated development environment for the Java language . A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2020.3. The vulnerability stems from a workspace model where deserialization could lead t...

Jenkins < 2.276, < 2.263.3 Arbitrary File Read Vulnerability

Jenkins is prone to an arbitrary file read vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2021-21615

The CVE-2021-21615 issue affects Jenkins 2.275 and LTS 2.263.2 and is caused by a TOCTOU race in the file browser used for workspaces and archived artifacts, enabling reading arbitrary files. Exploitation requires privileges such as Job/Workspace permission or control of workspace contents (e.g.,...

VulnCheck KEV: CVE-2019-11634

Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives...

jenkins -- Arbitrary file read vulnerability in workspace browsers

Jenkins Security Advisory: Description Medium SECURITY-2197 / CVE-2021-21615 Arbitrary file read vulnerability in workspace browsers...

PT-2021-14658 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.275 through 2.275 Jenkins LTS versions 2.263.2 through 2.263.2 Description: The issue is caused by a time-of-check to time-of-use TOCTOU race condition, allowing attackers to read arbitrary files using the file browser for...

Receiver upgrade on VDA to Citrix Workspace App will cause Grey Output from Webcam

In this scenario, the VDA 7.15 CU3 comes with Receiver 4.12 in the original installation. However, due to a security concern, the Receiver needed to be updated to Citrix Workspace 1912. After the update, when using the webcam, the camera is detected, but instead of the image, only a grey field is...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 60. Vulnerability Details CVEID: CVE-2020-4881 DESCRIPTION: IBM Planning Analytics ou...

CWA for Windows does not dynamically update icons in start menu (published applications) | works fine if refresh apps in CWA is done

This articles describes how we can force an update on start menu applications coming from Citrix workspace app on the endpoint when there is a chance made, i.e.- application name changed from Citrix studio etc...

Cloudbees Jenkins and LTS Information Disclosure Vulnerability (CNVD-2021-04653)

Cloudbees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An information disclosure...

Cloudbees Jenkins 后置链接漏洞

Cloudbees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An information disclosure...

Doppler VDP: Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages

Summary: I have found a stored XSS vulnerability in the following config setting page. https://dashboard.doppler.com/workplace//projects/example-project/configs/dev/logs When you invite other users to the workspace, the xss could be used to exploit other users also. Steps To Reproduce: 1 . Visit...

Workspace App 1912.1000 - Workspace App Update removes user created shortcuts from Desktop

Consider the following scenario: Users have created shortcuts of published applications manually on their Desktop and have also pinned it to the task bar. When the Receiver is upgraded from 4.9.6001 to Workspace App for Windows 1912 or 2006, on the first launch of a published app, the shortcuts...

Auto-Update Fails with Citrix Workspace App 2012 for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Automatic updates from Citrix Workspace app 2012 for Windows fails with the error "Could not load fi...

NSA Warns Russian Hacker Exploiting VMware Bug to Breach Corporate Networks

The US National Security Agency NSA on Monday issued an advisory warning that Russian threat actors are leveraging recently disclosed VMware vulnerability to install malware on corporate systems and access protected data. Specifics regarding the identities of the threat actor exploiting the VMwar...

Error Message Connection to "ip address" has been lost. Please check your network and try again.

When launch app from ADC on Linux workspace app, it shows below error: Connection to "192... - NETWORK" has been lost. Please check your network and try again...

How to collect logs for Citrix Workspace App for Windows

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information This article describes the steps for collecting logs and key data from Citrix Workspace app for Windows...

VMware Workspace One Access / VMware Identity Manager Command Injection Vulnerability (VMSA-2020-0027)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by a unspecified command injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version. C Tenable...