Oracle Hyperion 安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion Workspace product, which arises from a...

PT-2023-4024 · Oracle · Oracle Hyperion Workspace

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Workspace version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the UI and Visualization component of Oracle Hyperion Workspace. It allows a low-privileged attacker with network access via...

workspace-stm2.ra.ubs.com Cross Site Scripting vulnerability OBB-3526176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Citrix session disconnects unexpectedly which appears to be a CWA Crash

The users ICA session simply drops after a few seconds of turning grey. The cause seems to be a Workspace App crash, a dump file is created of the wfice32 process and the application crash is logged in event viewer. Error event: Faulting application name: WFICA32.EXE, version: 22.10.0.15, time...

Blank Windows Display when Open Citrix Workspace APP

When opening Citrix Workspace App, it displays blank. User cannot input store's URL or username&password to login. However, the ICA session can be launched through browser. It shows msedgewebview2.exe crashed because tsafedoc64.dll does not meet the Microsoft signing level requirement in Event...

CVE-2023-24486

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

CVE-2023-24486

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

Design/Logic Flaw

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

CVE-2023-24486

Citrix Workspace app for Linux is affected by a session takeover vulnerability (CVE-2023-24486) due to improper access control. An authenticated local user could gain access to another user’s Citrix Virtual Apps and Desktops session on the same machine when launching published desktops/applicatio...

CVE-2023-24486 Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

CVE-2023-24486 Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who is using the same computer from which the ICA session is launched...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access to applications, desktops, and data by Citrix Systems, Inc. A security vulnerability exists in the Citrix Workspace app that stems from improper access control...

PT-2023-4082 · Citrix · Citrix Workspace App For Linux

Name of the Vulnerable Software and Affected Versions: Citrix Workspace App for Linux affected versions not specified Description: A vulnerability in Citrix Workspace App for Linux is related to inadequate access control. Exploitation of this issue may allow a malicious local user to gain access ...

Updated keepass packages fix security vulnerability

Allows an attacker, who has write access to the XML configuration file, to obtain the cleartext passwords by adding an export trigger. Disputed by vendor due to level of access required. CVE-2023-24055 Possible to recover the cleartext master password from a memory dump, even when a workspace is...

CVE-2023-30955

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fi...

CVE-2023-30955

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fi...

Authorization

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fi...

CVE-2023-30955 Foundry workspace-server Developer Mode Authorization Bypass

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fi...

CVE-2023-30955 Foundry workspace-server Developer Mode Authorization Bypass

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fi...

CVE-2023-30955

CVE-2023-30955 affects Palantir Foundry workspace-server prior to version 7.7.0, enabling a user to bypass an authorization check and view/interact with Developer Mode settings with insufficient privileges. The issue is resolved by upgrading to workspace-server 7.7.0 (fix deployed). Practical gui...