PT-2016-6246 · Citrix+1 · Citrix Xenmobile Mdx Toolkit+2

Published 2016-07-13 · Updated 2016-07-14 · CVE-2016-5109

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Citrix Worx Home for iOS versions prior to 10.3.6 Citrix XenMobile MDX Toolkit for iOS versions prior to 10.3.6

Description The issue might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.

Recommendations For Citrix Worx Home for iOS versions prior to 10.3.6, update to version 10.3.6 or later. For Citrix XenMobile MDX Toolkit for iOS versions prior to 10.3.6, update to version 10.3.6 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-5109

Affected Products

Citrix Worx Home

Citrix Xenmobile Mdx Toolkit

Ios

References · 3

• https://osv.dev/vulnerability/CVE-2016-5109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5109 · Security Note
• http://support.citrix.com/article/CTX214006 · Vendor Advisory