Fedora: Security Advisory for plasma-workspace (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

K75532331: iRulesLX debug NodeJS vulnerability CVE-2019-6644

Security Advisory Description Similar to the issue identified in CVE-2018-12120, the BIG-IP system will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible. CVE-2019-6644 Impac...

Citrix Workspace App installation fails on Windows Server 2012 R2

Citrix Workspace App CWA version 2109 and above will fail to install on Windows Server 2012 R2 Systems with the error "Unable to install the following prerequisites. Install them manually and then try to install Citrix workspace App again.” Microsoft Edge Webview2 Runtime: Error Code: -2147219198...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX477617)

The version of Citrix Workspace App installed on the remote host is prior to 1912 LTSR CU7 Hotfix 2, 2203 LTSR CU2 or 2212. It is therefore affected by multiple vulnerabilities as described in the CTX477617 advisory: - A local attacker can elevate privileges to those of an Administrator or SYSTEM...

Citrix Workspace App for Linux Privilege Escalation (CTX477618)

The version of Citrix Workspace installed on the remote host is prior to 2302, It is, therefore, affected by a privilege escalation vulnerability. A local attacker can take over the session of another user using a vulnerable version of Citrix Workspace App for Linux. Note that Nessus has not test...

CVE-2023-24485

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

CVE-2023-24485

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

Design/Logic Flaw

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

Citrix Resolves Vulnerabilities in Virtual Apps and Workspace Apps

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Citrix Systems has addressed vulnerabilities in its Virtual Apps and Desktops, as well as Workspace Apps products, that could potentially enable attackers with local access to the target to elevat...

Citrix Workspace App 安全漏洞

Citrix Systems Citrix Workspace App formerly known as Receiver is an application used to provide secure access to applications, desktops, and data from Citrix Systems, Inc. A security vulnerability exists in the Citrix Workspace App that originates from allowing a standard user to perform...

Citrix Workspace App 安全漏洞

Citrix Systems Citrix Workspace App formerly known as Receiver is an application used to provide secure access to applications, desktops, and data from Citrix Systems, USA. A security vulnerability exists in Citrix Workspace App that originates from a malicious user being able to write log files ...

CVE-2023-24485

Citrix Workspace App for Windows vulnerabilities CVE-2023-24484 and CVE-2023-24485 allow a local user to escalate to SYSTEM during installation/uninstallation of vulnerable versions. AFFECTED SOFTWARE: Citrix Workspace App for Windows (pre-2212; 2203 LTSR before CU2; 1912 LTSR before CU7 Hotfix 2...

CVE-2023-24485 Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app...

SUSE CVE-2015-1307

plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package...

SUSE CVE-2015-1308

kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when the screen is locked...

SUSE CVE-2015-4925

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

SUSE CVE-2016-2312

Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen being unlocked when turning a screen on again...

SUSE CVE-2022-29244

npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces, --workspace=. Anyone who has run npm pack or npm publish inside a workspace, as of v7.9.0 and v7.13.0 respectively, may be affected and have published...

Vulnerabilities fixed in Citrix products

Several vulnerabilities have been fixed in Citrix products. The vulnerability with reference CVE-2023-24483 is located in Citrix Virtual Apps and Desktops Windows VDAs. An authenticated malicious party could potentially exploit this vulnerability to obtain elevated privileges within a Windows VDA...

Citrix Workspace app for Windows Security Bulletin for CVE-2023-24484 & CVE-2023-24485

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app. These vulnerabilities have the following identifiers: CVE ID| Description| Vulnerability Type| Pre-conditions ---|---|---|---...