Lucene search
+L

4885 matches found

Pen Test Partners Blog
Pen Test Partners Blog
added 2020/09/21 7:53 a.m.86 views

The Return of Raining SYSTEM Shells with Citrix Workspace app

TL;DR Back in July I documented a new Citrix Workspace vulnerability that allowed attackers to remotely execute arbitrary commands under the SYSTEM account. Well after some further investigation on the initial fix I discovered a new vector that quite frankly should not exist at all since the...

6CVSS9.4AI score0.02062EPSS
SaveExploits0
Citrix
Citrix
added 2020/09/17 12:00 a.m.9 views

Single-sign On fails when Workspace App for Windows is configured with Citrix Gateway.

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. ​​​​​​​ When you configure Citrix Gateway to support single sign-on SSO through the Citrix Workspace...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2020/09/17 12:00 a.m.13 views

Application shortcuts still remain on the Start Menu when the application is already unassigned for the user

Workspace App has been configured with the option "Show Applications in Start Menu" and published apps appear on the start menu. When an application is removed from being assigned to a user, its shortcut still shows up on the users start menu...

7AI score
SaveExploits0
NVD
NVD
added 2020/09/16 2:15 p.m.21 views

CVE-2020-2275

Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller...

6.5CVSS0.01704EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/09/16 1:20 p.m.22 views

CVE-2020-2275

Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller...

6.3AI score0.01704EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/16 1:20 p.m.64 views

CVE-2020-2275

The CVE-2020-2275 entry concerns the Jenkins Copy data to workspace Plugin, versions 1.0 and earlier. The vulnerability arises because the plugin does not restrict which directories can be copied from the Jenkins controller to job workspaces, enabling an attacker with Job/Configure permission to ...

6.5CVSS6.3AI score0.01704EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/16 12:00 a.m.11 views

PT-2020-15504 · Jenkins · Jenkins Copy Data To Workspace Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Copy data to workspace Plugin versions 1.0 and earlier Description: The issue allows attackers with Job/Configure permission to read arbitrary files on the Jenkins controller due to a lack of limitation on which directories can be...

6.5CVSS6.3AI score0.01704EPSS
SaveExploits0References6
Citrix
Citrix
added 2020/09/14 12:00 a.m.13 views

Bidirectional URL redirection (client to server) does not work since Workspace app for Windows 1904

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Bidirectional URL redirection feature is not able to redirect URL from client to server since...

7AI score
SaveExploits0
Citrix
Citrix
added 2020/09/02 12:00 a.m.10 views

Extended Keys Not Appearing When Selecting "Keyboard" Button in Desktop Viewer - Citrix Workspace App for iOS

When using a Smart Keyboard, unable to display extended keys when selecting the "Keyboard" option on Citrix Workspace App for iOS on iOS 12.x devices...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2020/08/20 12:00 a.m.6 views

IBM Planning Analytics Workspace Resource Management Error Vulnerability

IBM Planning Analytics is a suite of business planning analytics solutions from IBM USA. The solution supports automated execution of business planning, budgeting, and analysis processes.Planning Analytics Workspace is the Web management interface for IBM Planning Analytics. A security...

6.5CVSS7AI score0.00891EPSS
SaveExploits0References1
OSV
OSV
added 2020/08/19 1:15 p.m.6 views

CVE-2020-4648

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019...

6.5CVSS6.6AI score0.00891EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/19 1:15 p.m.20 views

CVE-2020-4648

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019...

6.5CVSS6.2AI score0.00891EPSS
SaveExploits0References2
Prion
Prion
added 2020/08/19 1:15 p.m.13 views

Authorization

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019...

4CVSS6.1AI score0.00891EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/08/19 12:35 p.m.20 views

CVE-2020-4648

A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users without authorization to do so. IBM X-Force ID: 186019...

6.5CVSS6.2AI score0.00891EPSS
SaveExploits0References2
Citrix
Citrix
added 2020/08/18 12:00 a.m.46 views

Error 2320 - Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword

When trying to launch the applications through the Native Workspace App you get an error stating 'Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword'. Resetting Workspace App does not resolve the issue...

7AI score
SaveExploits0
Citrix
Citrix
added 2020/08/16 12:00 a.m.12 views

How to suppress "Add Account" prompt on Citrix Workspace App for Windows

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Suppress "Add Account" prompt after installing Citrix Workspace App for Windows...

7.1AI score
SaveExploits0
Citrix
Citrix
added 2020/08/13 12:00 a.m.12 views

Workspace App for Windows 1912 LTSR - Second icon displays in the system tray

Second icon displays in the system tray and unable to open the Workspace App using the second icon...

7AI score
SaveExploits0
Citrix
Citrix
added 2020/07/29 12:00 a.m.10 views

CWA for Linux/CWA for iOS : Unable to type inside Windows 10 session

When a Windows 10 session is launched from Workspace app for Linux and Workspace app for iOS , we cannot type anything inside a session...

6.9AI score
SaveExploits0
OSV
OSV
added 2020/07/24 10:15 p.m.8 views

CVE-2020-8207

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

8.8CVSS7.7AI score0.02062EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/24 10:15 p.m.28 views

CVE-2020-8207

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

8.8CVSS9.2AI score0.02062EPSS
SaveExploits0References1
Rows per page
Query Builder