CVE-2018-15591

CVE-2018-15591 affects Ivanti Workspace Control before 10.3.10.0 (and RES One Workspace). A local authenticated user can bypass application whitelisting to execute arbitrary code via multiple unspecified attack vectors. Connected material references exploitation paths involving PowerGrid (PowerGr...

CVE-2018-15593

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector...

CVE-2018-15592

Ivanti Workspace Control and RES One Workspace are affected by CVE-2018-15592 (pre-10.3.10.0). A local authenticated user can escalate privileges to execute processes with elevated rights via an unspecified attack vector. CVSS information from NVD indicates a local, low complexity attack with use...

Users on IOS devices can not log into XenApp after upgrading to Citrix Workspace app for iOS, authentication broken in 17.08

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users on Ipad IOS devices can no longer log into XenApp after upgrading Citrix Receiver to Citrix...

CVE-2018-6979

The CVE-2018-6979 issue affects VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) and VMware AirWatch/Workspace ONE versions from 9.1.x up to 9.7.x prior to fixed releases. The root cause is a SAML authentication bypass during device enrollment, which can allow impersona...

CVE-2018-6979

The VMware Workspace ONE Unified Endpoint Management Console A/W Console 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerabili...

Authentication flaw

The VMware Workspace ONE Unified Endpoint Management Console A/W Console 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerabili...

CVE-2018-6979

The VMware Workspace ONE Unified Endpoint Management Console A/W Console 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9.4.x prior to 9.4.0.22, 9.3.x prior to 9.3.0.25, 9.2.x prior to 9.2.3.27, and 9.1.x prior to 9.1.5.6 contains a SAML authentication bypass vulnerabili...

VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) updates resolve SAML authentication bypass vulnerability

The VMware Workspace ONE Unified Endpoint Management Console AirWatch Console contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based...

VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) update resolves SAML authentication bypass vulnerability

The VMware Workspace ONE Unified Endpoint Management Console AirWatch Console contains a SAML authentication bypass vulnerability which can be leveraged during device enrollment. This vulnerability may allow for a malicious actor to impersonate an authorized SAML session if certificate-based...

Ivanti Workspace Control Application PowerGrid RWS Whitelist Bypass

------------------------------------------------------------------------ Ivanti Workspace Control Application Whitelist bypass via PowerGrid /RWS command line argument ------------------------------------------------------------------------ Yorick Koster, August 2018...

Ivanti Workspace Control Application PowerGrid SEE Whitelist Bypass

------------------------------------------------------------------------ Ivanti Workspace Control Application Whitelist bypass via PowerGrid /SEE command line argument ------------------------------------------------------------------------ Yorick Koster, August 2018...

Citrix Workspace App Launcher is unable to launch applications automatically with Apple Safari 12 or Application Enumeration failing through Safari 13.0.2 version via Citrix Access Gateway

Citrix Workspace App andCitrix Receiver cannot launchapplications automatically with Safari version 12...

MACOS: Need to whitelist Citrix Workspace Kernel Extensions - need Team ID and Bundle ID

Need to whitelist Citrix Workspace Kernel Extensions - need Team ID and Bundle Identifier to load into macOS MDM provider...

Citrix Workspace App (CWA) for Linux – ICA File Not Launching Automatically

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149for more information. Overview The removal of NPAPI support by Firefox will affect user experience for users who access...

Real-time Media Engine (RTME) for Citrix Workspace App for Mac OS "unoptimized" or fails to install

When attempting to use the Citrix Workspace app 1808 for Mac with the Real-time Media Engine RTME 2.5 or previous versions , customers may experience the following symptoms: If an endpoint is upgraded to CWA from previous versions of Receiver, and they had the RTME 2.5 or previous version...

Citrix Workspace app for Chrome / Citrix Receiver for Chrome Blanks out Background Application

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. Applications running in background app screen blanks out. Steps to Reproduce: 1. Open some...

Error: "Your apps are not available at this time" after upgrading to the new Workspace UI

After upgrading to the new Workspace UI, Citrix Cloud end users are no longer able to access their resources and receive the message "Your apps are not available at this time."...

DLL Hijacking Vulnerability in GE iFix workspace.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix workspace.exe component, which can be...

A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management

Error "A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management" whiletrying to launch WEM console...