CVE-2016-5109: Improper Access Control

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication...

Citrix Studio < 7.6.1000 Insecure Access Policy Configuration (CTX213045)

The version of Citrix Studio, bundled with Citrix XenApp or XenDesktop, is prior to 7.6.1000. It is, therefore, affected by an unspecified security bypass vulnerability. An unauthenticated, remote attacker can exploit this to set Access Policy rules on the XenDesktop Delivery Controller, resultin...

Receiver for Mac Support on macOS Sierra (macOS 10.12) Beta Builds

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Citrix Receiver for Mac team is working on product updates to support the upcoming release ofmac...

Citrix XenServer Active Directory Authentication Incorrect Host Management Security Bypass (CTX213549, CTX213769)

The version of Citrix XenServer running on the remote host is 7.x prior to 7.0 hotfix XS70E003. It is, therefore, affected by a security bypass vulnerability due to incorrect handling of Active Directory AD credentials. An unauthenticated, remote attacker on the management network with AD...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

Citrix GoToMyPC Suffers Major Password Reuse Attack

Citrix Systems is forcing all its GoToMyPC remote desktop access service customers to reset their passwords because of a “very sophisticated attack” that targeted the service over the weekend. John Bennett, product line director for Citrix said the attack was a result of leaked passwords from oth...

Citrix Receiver for iOS Design Vulnerability

Citrix Receiver for iOS is a suite of iOS-based client software for accessing XenDesktop and XenApp from Citrix Systems. A design vulnerability exists in Citrix Receiver for iOS versions prior to 7.0. An attacker could exploit the vulnerability to prevent TLS certificates from being properly...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

Code injection

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

CVE-2016-5433

CVE-2016-5433 affects Citrix iOS Receiver prior to 7.0, where TLS certificate validation can be incorrectly performed. The vulnerability is described in sources noting that all versions before 7.0 are affected and that upgrading to Citrix iOS Receiver 7.0 or later mitigates the issue. Connected d...

CVE-2016-5433

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

PT-2016-6428

Name of the Vulnerable Software and Affected Versions Citrix iOS Receiver versions prior to 7.0 Description The issue allows attackers to cause TLS certificates to be incorrectly validated. Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue...

CVE-2016-5433: Improper Input Validation

Citrix iOS Receiver before 7.0 allows attackers to cause TLS certificates to be incorrectly validated via unspecified vectors...

Identify Web Application Firewall: WAFW00F

WAFW00F Fingerprints and Identify Web Application Firewall WAF products WAFW00F is a Python tool to help you fingerprint and identify Web Application Firewall WAF products. It is an active reconnaissance tool as it actually connects to the web server, but it starts out with a normal HTTP response...

CVE-2016-5433 - TLS Certificate Validation Vulnerability in Citrix iOS Receiver

Description of Problem A vulnerability has been identified in Citrix iOS Receiver that could result in TLS certificates being incorrectly validated. This vulnerability has been assigned the following CVE number: CVE-2016-5433: TLS Certificate Validation Vulnerability in Citrix iOS Receiver. This...

MS16-083: Security update for Adobe Flash Player: June 16, 2016

None None...

Citrix XenServer Insecure Host Management AD Authentication Vulnerability

The Citrix XenServer product line is an enterprise-class platform that manages server virtualization in the data center by flexibly aggregating compute and storage resources. A security vulnerability in XenServer Hotfix XS70E003 prior to version 7.0 could allow a user with Active Directory...

Citrix Xenserver Web Detection

This script detects the Citrix Xenserver Webinterface SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2016-5302

Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account...