CVE-2016-9111

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the...

CVE-2016-9111

CVE-2016-9111 (Citrix Receiver/Receiver Desktop Lock 4.5) is described as an authentication bypass allowing an attacker with physical access to a VDI to bypass login by temporarily disconnecting the LAN, i.e., a local access control issue. Public records note that the vendor reportedly could not ...