CVE-2016-5433

MEDIUM

Citrix iOS Receiver < 6.1.5 - TLS Certificate Validation Bypass

Title source: llm
STIX 2.1

Description

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX213998

Scores

CVSS v3 6.1
EPSS 0.0010
EPSS Percentile 27.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

Details

CWE
CWE-20 CWE-310
Status published
Products (1)
citrix/ios_receiver < 6.1.5
Published Jun 17, 2016
Tracked Since Feb 18, 2026