CVE-2016-9111

MEDIUM

Citrix Receiver/Receiver Desktop Lock 4.5 - Authentication Bypass

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2016-9111 has a selected CVSS score of 6.8 (medium); EIP currently links 1 catalogued exploit.

Description

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the researcher was unable to provide us with information that would allow us to confirm the behaviour and, despite extensive investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The researcher has also, despite additional requests for information, ceased to respond to us."

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBCitrix Receiver/Receiver Desktop Lock 4.5 - Authentication BypassExploitDB exploitby Rithwik JayasimhaNot analyzed1 file
ExploitDB
PoC details

References

6