Looking for:
Citrix workspace 2002 for windows
Applicable Products.Citrix workspace 2002 for windows
A vulnerability has been identified in the automatic update service of Citrix Workspace app for Windows that could result in:. A local user escalating their privilege level to that of an administrator on the computer running Citrix Workspace app for Windows. This vulnerability affects the following supported versions of Citrix Workspace app for Windows:. Note that this vulnerability was originally reported against a subset of the versions above. However, further investigation has discovered potential variant forms of this attack and the affected versions have been amended accordingly.
This vulnerability does not affect Citrix Workspace app on any other platforms or any supported versions of Citrix Receiver. This vulnerability only exists if Citrix Workspace app was installed using an account with local or domain administrator privileges. It does not exist when a standard Windows user installed Citrix Workspace app for Windows.
A remote compromise is only possible when the user has enabled Windows file sharing SMB and only when the updater service is running. If authentication is required for SMB then an attacker must be able to authenticate before they could exploit this issue. Users with automatic updates enabled and applied should have already been updated to a fixed version.
The issue has been addressed in the following versions of Citrix Workspace app for Windows:. Note that these versions have been updated since the original publication of this bulletin. Citrix strongly recommends that customers check if the version they are running has been automatically updated and, if necessary, upgrade to a fixed version as soon as possible.
The latest version of Citrix Workspace app for Windows is available from the following Citrix website location:. Citrix would like to thank Ceri Coburn at Pen Test Partners for working with us to protect Citrix customers during both the initial disclosure of this issue and subsequent variants. Citrix is notifying customers and channel partners about this potential security issue. If you require technical assistance with this issue, please contact Citrix Technical Support. Citrix welcomes input regarding the security of its products and considers any and all potential vulnerabilities seriously.
Failed to load featured products content, Please try again. Customers who viewed this article also viewed. Log in to Verify Download Permissions. Description of Problem A vulnerability has been identified in the automatic update service of Citrix Workspace app for Windows that could result in: A local user escalating their privilege level to that of an administrator on the computer running Citrix Workspace app for Windows.
The issue has the following identifier: CVE This vulnerability affects the following supported versions of Citrix Workspace app for Windows: Citrix Workspace app , and Mitigating Factors This vulnerability only exists if Citrix Workspace app was installed using an account with local or domain administrator privileges. Acknowledgements Citrix would like to thank Ceri Coburn at Pen Test Partners for working with us to protect Citrix customers during both the initial disclosure of this issue and subsequent variants.
What Citrix Is Doing Citrix is notifying customers and channel partners about this potential security issue. Reporting Security Vulnerabilities Citrix welcomes input regarding the security of its products and considers any and all potential vulnerabilities seriously. Was this page helpful? Thank you! Sorry to hear that. Name Name is required. Email Email address is required. Close Submit. Featured Products. Need more help? Product issues. Open or view cases Chat live.
Other support options. Share this page.
Citrix Workspace app for Windows.Citrix workspace 2002 for windows
ICA settings reference. Aviso legal. Este texto foi traduzido automaticamente. Este artigo foi traduzido automaticamente. Both users and administrators can install Citrix Workspace app. Administrator privileges are required only when using pass-through authentication and Citrix Ready workspace hub with Citrix Workspace app for Windows.
The following table describes the differences when Citrix Workspace app is installed as an administrator or a user:. Administrators can override the user-installed instance of Citrix Workspace app and continue with the installation successfully. When the installation is complete, Citrix Workspace app requests that you add an account.
For information on how to add an account, see Add accounts or switch servers. You can customize the Citrix Workspace app installer by specifying different command-line options. The installer package self-extracts to the system temp directory before launching the setup program. The space requirement includes program files, user data, and temp directories after launching several applications.
To install the Citrix Workspace app using the Windows command line, launch the command prompt and type the following on a single line:. Use this switch in the following scenarios:. For more information, see Deprecation. If you have enabled auto-update, you can choose the version you want to update. See Lifecycle Milestones for more information.
Indicates the number of times that you can defer notifications when an update is available. For more information, see Citrix Workspace Updates. When a new version of the app is available, Citrix rolls out the update for a specific delivery period. With this parameter, you can control at what time during the delivery period you can receive the update.
Start App Protection component and provides enhanced security by restricting the ability of clients to be compromised by keylogging and screen-capturing malware. See App Protection for more information. Excludes the Citrix Embedded Browser binaries. If your version of Citrix Workspace app includes the Citrix Embedded Browser binaries and you are upgrading to Version , the embedded browser binaries are automatically updated during the upgrade. Specifies the custom installation directory for Citrix Workspace app installation.
However, Citrix Workspace app does include Citrix embedded browser. There is no other difference. I am a customer using Citrix Receiver 4. Which version will I automatically be updated to? I am a customer using Citrix Workspace app for Windows and have enabled auto-update for the CR track. What happens to the Citrix embedded browser component which was installed?
This will cause the Browser Content Redirection feature to stop working. Web and SaaS based application will not be launched in the embedded browser. These apps will launch using the Citrix Secure Browser Service.
Was this page helpful? Thank you! For the most recently updated content, see the Citrix Workspace app for Windows current release documentation.
That documentation includes instructions for upgrading from earlier versions. Links to external websites found in the PDF take you to the correct pages, but links to other sections within the PDF are no longer usable.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product purchase decisions.
Citrix Workspace app for Windows. Current Release Current Release View PDF. This content has been machine translated dynamically. Give feedback here. Thank you for the feedback. Translation failed! The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language.
No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated.
Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content. Instructions for Contributors. January 11, Contributed by: L C M.
No comments:
Post a Comment