5469 matches found
CVE-2016-9111
Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...
Authentication flaw
Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...
CVE-2016-9111
Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...
CVE-2016-9111
Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...
CVE-2016-9111
CVE-2016-9111 (Citrix Receiver/Receiver Desktop Lock 4.5) is described as an authentication bypass allowing an attacker with physical access to a VDI to bypass login by temporarily disconnecting the LAN, i.e., a local access control issue. Public records note that the vendor reportedly could not ...
How to Configure Internal Beacon for Single FQDN on StoreFront
This article describes how to Configure Internal Beacon for Single FQDN on StoreFront. Background When you access any URL in Citrix Receiver, it tries to resolve both internal and external beacons. First it will resolve the internal beacon, followed by the external beacon, and then Citrix Receive...
Citrix Receiver/Receiver Desktop Lock Authentication Bypass Vulnerability
Citrix Receiver is a device that enables organizations to securely deliver virtual desktops and Windows, Web and SaaS applications over any user device with high performance, and in turn, effectively manage the large number of new devices entering the workspace. An authentication bypass...
Citrix Receiver / Receiver Desktop Lock 4.5 Authentication Bypass
thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix Vendor Homepage: https://www.citrix.com/ Software Link: Receiver ...
Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass
Citrix ReceiverReceiver Desktop Lock 4.5 - Authentication Bypass thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix...
Citrix Receiver/Receiver Desktop Lock 4.5 - Authentication Bypass
thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix Vendor Homepage: https://www.citrix.com/ Software Link: Receiver ...
Citrix Receiver / Receiver Desktop Lock 4.5 - Authentication Bypass Vulnerability
Exploit for multiple platform in category local exploits thel3l Title: Citrix Receiver/Receiver Desktop Lock 4.5 Incorrect Access Control CVE: CVE-2016-9111 Date of Discovery: October 27 2016 Exploit Author: Rithwik Jayasimha Author Homepage/Contact: https://thel3l.me Vendor Name: Citrix Vendor...
Citrix NetScaler ADC URL Redirection Vulnerability
Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery. A URL redirection vulnerability exists in Citrix NetScaler ADC. An attacker could exploit this vulnerability to allow users to access the attacker's malicious links without notice...
Attach a smart card reader and insert your smart card to log on
Failed to add store site on Citrix receiver with error "Attach a smart card reader and insert your smart card to log on". The customer did not enable smart card authentication method...
CVE-2016-9028
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...
CVE-2016-9028
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...
Design/Logic Flaw
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...
CVE-2016-9028
Unauthorized redirect vulnerability in Citrix NetScaler ADC before 10.1 135.8, 10.5 61.11, 11.0 65.31/65.35F and 11.1 47.14 allows a remote attacker to steal session cookies of a legitimate AAA user via manipulation of Host header...
CVE-2016-9028
The CVE-2016-9028 issue affects Citrix NetScaler ADC (various 10.x/11.x builds) and enables an unauthenticated, remote attacker to steal session cookies by manipulating the Host header in an unauthorized redirect flow. Affected versions include 10.1 <135.8, 10.5 <61.11, 11.0 <65.31/65.35...
Citrix NetScaler ADC Unauthorized Redirect Vulnerability (CTX218361)
An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC that could allow a remote attacker to obtain session cookies of a redirected AAA user. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...