SUSE CVE-2023-3114

Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the sa...

CVE-2023-3114

Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the sa...

CVE-2023-3114 Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool

Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate, higher-privileged workspace in the sa...

Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces to Target an Agent Pool

Summary Terraform Enterprise since version v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents within the organization. This authorization flaw could potentially allow a workspace to access resources from a separat...

Generative-AI apps & ChatGPT: Potential risks and mitigation strategies

Losing sleep over Generative-AI apps? You're not alone or wrong. According to the Astrix Security Research Group, mid size organizations already have, on average, 54 Generative-AI integrations to core systems like Slack, GitHub and Google Workspace and this number is only expected to grow. Contin...

HashiCorp Terraform 安全漏洞

HashiCorp Terraform is an open source tool for provisioning and managing cloud infrastructures from HashiCorp, USA. A security vulnerability exists in Terraform Enterprise prior to version v202207-1 that stems from not properly enforcing authorization rules for agent pools, which could result in ...

Pre-configure the Store-URL in the “Citrix Workspace App” for MAC

...

Virtual App/Desktop Sessions Fail to Launch with Citrix Workspace App 2305 for Windows

Virtual app/desktop session launches with Citrix Workspace app 2305 for Windows might sporadically fail. This may result in session launches silently quitting, session disconnects with a gray screen, or session launches failing with an error message ‘ SSL Error 27: No local security certificates...

Your account cannot be added using this server address. Make sure you entered it correctly

Error "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead." when trying to logon Gateway URL via Citrix Workspace...

[NS 13.1]iOS/Android Workspace adding account failure via NetScaler Gateway

After NetScaler upgrade from 13.0 to 13.1, end-user may find Mobile Workspace Application will prompt error when adding account via NetScaler Gateway: On Android Workspace: it shows "An error has occurred while connecting. Check your server address and data connection.Error Code 548." On iOS...

CVE-2023-32749

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all...

Security Bulletin: IBM Planning Analytics Workspace has addressed a vulnerability in GNU zlib (CVE-2022-37434)

Summary IBM Planning Analytics Workspace is vulnerable to a heap-based overlow in GNU zlib . GNU zlib has been upgraded in IBM Planning Analytics Workspace. Vulnerability Details CVEID:CVE-2022-37434 DESCRIPTION: zlib is vulnerable to a heap-based buffer overflow, caused by improper bounds checki...

The vulnerability of the VMware Workspace One Access application management platform, related to the administration console of VMware Identity Manager (vIDM), involves redirecting URLs to an unreliable website. This allows a malicious user to redirect users to any arbitrary URL address.

The vulnerability of the VMware Workspace One Access application management platform, as well as the VMware Identity Manager administration consoles, is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow a malicious actor to redirect...

Workspace error "Unable to add account with the given server URL"

Afterentering Citrix Gateway URL on Workspace and thenenteringthecredentials, the user encounters the following error: "Unable to add account with the given server URL. Ensure that it is correct or enter your email address"...

Workspace error "Unable to connect to the server. Check your network connection and retry."

After adding Citrix Gateway URL on Workspace App and entering thecredentials, the users encounter the error "Unable to connect to the server. Check your network connection and retry."...

Vulnerability fixed in VMWare Workspace ONE and Identity Manager

VMWare has fixed a vulnerability in Workspace ONE and Identity Manager vIDM. A malicious party could exploit it for a redirect attack, thus tricking the victim into trick the victim into contacting a server under its own control. This may allow the malicious party to obtain login credentials and...

Windows on-screen keyboard shows up in a Windows VDA session through iOS/HTML5 Citrix Workspace App

Using Citrix Workspace app for HTML5, or Citrix Workspace app for iOS, on an iPad, to launch a virtual Windows desktop, tap the screen to start inputting/editing in the session, the Windows VDA side on-screen keyboard may show up, instead of the iOS native touch keyboard...

Worldwide 2022 Email Phishing Statistics and Examples

Explore the need for going beyond built-in Microsoft 365 and Google Workspace™ security based on email threats detected in 2022...

CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...

CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...