PT-2016-6246 · Citrix+1 · Citrix Xenmobile Mdx Toolkit+2

Publicado 2016-07-13 · Atualizado 2016-07-14 · CVE-2016-5109

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Citrix Worx Home for iOS versions prior to 10.3.6 Citrix XenMobile MDX Toolkit for iOS versions prior to 10.3.6

Description The issue might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.

Recommendations For Citrix Worx Home for iOS versions prior to 10.3.6, update to version 10.3.6 or later. For Citrix XenMobile MDX Toolkit for iOS versions prior to 10.3.6, update to version 10.3.6 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-5109

Produtos afetados

Citrix Worx Home

Citrix Xenmobile Mdx Toolkit

Ios

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-5109 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-5109 · Nota de Segurança
• http://support.citrix.com/article/CTX214006 · Aviso do Fabricante