4885 matches found
Improper access control
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...
CVE-2020-8207
CVE-2020-8207 concerns Citrix Workspace app for Windows (1912 CU1 and 2006.1) where an improper access control in the Citrix Workspace Updater Service allows privilege escalation and code execution when the automatic updater is running. The vulnerability stems from the UpdateFilePath/UpdateFileHa...
CVE-2020-8207
Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...
Citrix Systems Workspace App Access Control Error Vulnerability (CNVD-2020-42654)
Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in the automatic update service in the Citrix Systems Workspace App Windows 1912 LTSR a...
Fixed vulnerability in Citrix Workspace (formerly Citrix Receiver)
A vulnerability has been fixed in the automatic update service of the Citrix Workspace app for Windows that could result in increased user privileges. Citrix has made an update available to fix the vulnerability. fix. For more information, see the following page:...
Citrix Releases Security Updates for Workspace App for Windows
Citrix has released security updates to address a vulnerability in Workspace app for Windows. A remote attacker could exploit this vulnerability to take control of an affected system if Windows Server Message Block SMB is enabled. The Cybersecurity and Infrastructure Security Agency CISA recommen...
Raining SYSTEM Shells with Citrix Workspace app
TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...
Citrix Workspace app for Windows Security Update
Description of Problem A vulnerability has been identified in the automatic update service of Citrix Workspace app for Windows that could result in: A local user escalating their privilege level to that of an administrator on the computer running Citrix Workspace app for Windows. A remote...
The vulnerability of VMware Workspace One’s software lies in authentication process errors, which allow attackers to gain unauthorized access to protected information.
The vulnerability of VMware Workspace One software is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Android, Citrix Workspace App, Error 518
When launching an Application when account type added as "Web Interface" you mightreceive this error with an Android Device:...
Citrix Workspace App for Mac OSX UDP Audio redirection causing high CPU spikes for Citrix Viewer
Frequently CPU spikes while utilizing Citrix Workapce App for MAC OSX 2005 and audio over UDP...
Design/Logic Flaw
Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...
CWA for Android: Workspace App crashes when you hit try to cast using a Workspace Hub.
This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information. CWA for Android crashes with following trace when attempted to cast using Hub. Casting is successful...
PT-2020-15429 · Jenkins · Jenkins +1
Name of the Vulnerable Software and Affected Versions: Jenkins ZAP Pipeline Plugin versions 1.9 and earlier Jenkins versions prior to 2.228 excluding 2.227 and older, 2.204.5 and older, due to different security concerns Jenkins versions 2.228 through 2.230 Jenkins 2.222.x LTS versions Jenkins...
Unable to use bluetooth keyboard on Workspace for iPad
All iPad users updated through air watch to the new version of Workspace for iOS 20.6.0. After the upgrade the bluetooth keyboards they were using no longer pass through to published desktops...
Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session
Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session, comparing toCitrix Workspace app 1912 for Windows. In a Fiddler trace captured during session launch, you will see wfica32 attempting to connect tolocus.analytics.cloud.com:443 but failing...
Citrix workspace app | Uninstallation of CWA breaks ICA session
If we have VDAs with this order of installation CWA installed first and then the VDA. Now when wetryto uninstall or upgrade the CWA, some display drivers from thevda get removed, as a result the ICA session breaks and the only way to get it working again is to - reinstall the VDA reboot,...
Citrix Systems Workspace App Elevation of Privilege Vulnerability
Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows that stems from the program assigning...
Citrix Systems Workspace App Elevation of Privilege Vulnerability (CNVD-2020-35945)
Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. A security vulnerability exists in Citrix Systems Workspace App versions prior to 1912 Windows. A local attacker could exploit the...
