Lucene search

[email protected]CVE-2016-5109

HistoryJul 13, 2016 - 3:59 p.m.

CVE-2016-5109

2016-07-1315:59:00

CWE-284

[email protected]

web.nvd.nist.gov

cve-2016-5109

citrix worx home

xenmobile mdx toolkit

ios

touch id

authentication bypass

security vulnerability

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.

CPENameOperatorVersion
citrix:xenmobile_mdx_toolkitcitrix xenmobile mdx toolkiteq10.3.5
citrix:xenmobile_mdx_toolkitcitrix xenmobile mdx toolkiteq10.3.0
citrix:worx_homecitrix worx homeeq10.3.1
citrix:worx_homecitrix worx homeeq10.3.0
citrix:worx_homecitrix worx homeeq10.3.5

CPE	Name	Operator	Version
citrix:xenmobile_mdx_toolkit	citrix xenmobile mdx toolkit	eq	10.3.5
citrix:xenmobile_mdx_toolkit	citrix xenmobile mdx toolkit	eq	10.3.0
citrix:worx_home	citrix worx home	eq	10.3.1
citrix:worx_home	citrix worx home	eq	10.3.0
citrix:worx_home	citrix worx home	eq	10.3.5

References

support.citrix.com/article/CTX214006

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

4.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2016-5109

citrix1 prion1 cvelist1