Citrix Worx Home and Citrix XenMobile MDX Toolkit Security Bypass Vulnerability

Citrix Worx Home and Citrix XenMobile MDX Toolkit are both products of Citrix Systems USA. The former is a suite of software used to help users access data or work-related applications, and the latter is a toolkit that can encapsulate mobile applications on iOS or Android with Citrix logic and...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

Authentication flaw

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

CVE-2016-5109

Summary of the vulnerability (CVE-2016-5109) : Citrix Worx Home for iOS and XenMobile MDX Toolkit for iOS are affected. Versions affected: XenMobile MDX Toolkit for iOS 10.3.0.x–10.3.5.x and Worx Home 10.3.x for iOS 10.3.0.x–10.3.5.x. Root cause / impact : An attacker with physical access could b...

Citrix Studio < 7.6.1000 Insecure Access Policy Configuration (CTX213045)

The version of Citrix Studio, bundled with Citrix XenApp or XenDesktop, is prior to 7.6.1000. It is, therefore, affected by an unspecified security bypass vulnerability. An unauthenticated, remote attacker can exploit this to set Access Policy rules on the XenDesktop Delivery Controller, resultin...

Error "Citrix License Server unavailable. Check the License Server to Make Sure It Is Running"

When setting up XenDesktop 7.1 or higher, the licensing node displays the following error message, "Citrix License Server unavailable. Check the license server to make sure it is running." Reference Screenshot:...

Citrix Studio Installed

Binary data citrixstudioinstalled.nbin...

Receiver for Mac Support on macOS Sierra (macOS 10.12) Beta Builds

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Citrix Receiver for Mac team is working on product updates to support the upcoming release ofmac...

Citrix XenServer Active Directory Authentication Incorrect Host Management Security Bypass (CTX213549, CTX213769)

The version of Citrix XenServer running on the remote host is 7.x prior to 7.0 hotfix XS70E003. It is, therefore, affected by a security bypass vulnerability due to incorrect handling of Active Directory AD credentials. An unauthenticated, remote attacker on the management network with AD...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

Citrix GoToMyPC Suffers Major Password Reuse Attack

Citrix Systems is forcing all its GoToMyPC remote desktop access service customers to reset their passwords because of a “very sophisticated attack” that targeted the service over the weekend. John Bennett, product line director for Citrix said the attack was a result of leaked passwords from oth...

Citrix Receiver for iOS Design Vulnerability

Citrix Receiver for iOS is a suite of iOS-based client software for accessing XenDesktop and XenApp from Citrix Systems. A design vulnerability exists in Citrix Receiver for iOS versions prior to 7.0. An attacker could exploit the vulnerability to prevent TLS certificates from being properly...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

Code injection

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

CVE-2016-5433 affects Citrix iOS Receiver prior to 7.0, where TLS certificate validation can be incorrectly performed. The vulnerability is described in sources noting that all versions before 7.0 are affected and that upgrading to Citrix iOS Receiver 7.0 or later mitigates the issue. Connected d...

Identify Web Application Firewall: WAFW00F

WAFW00F Fingerprints and Identify Web Application Firewall WAF products WAFW00F is a Python tool to help you fingerprint and identify Web Application Firewall WAF products. It is an active reconnaissance tool as it actually connects to the web server, but it starts out with a normal HTTP response...