Lucene search

[email protected]CVE-2016-5109

HistoryJul 13, 2016 - 3:59 p.m.

CVE-2016-5109

2016-07-1315:59:08

CWE-284

[email protected]

web.nvd.nist.gov

cve-2016-5109

citrix worx home

xenmobile mdx toolkit

ios

touch id

authentication bypass

security vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.

Affected configurations

NVD

Node

citrixxenmobile_mdx_toolkitMatch10.3.0iphone_os

citrixxenmobile_mdx_toolkitMatch10.3.5iphone_os

Node

citrixworx_homeMatch10.3.0iphone_os

citrixworx_homeMatch10.3.1iphone_os

citrixworx_homeMatch10.3.5iphone_os

CPENameOperatorVersion
citrix:xenmobile_mdx_toolkitcitrix xenmobile mdx toolkiteq10.3.0
citrix:xenmobile_mdx_toolkitcitrix xenmobile mdx toolkiteq10.3.5

CPE	Name	Operator	Version
citrix:xenmobile_mdx_toolkit	citrix xenmobile mdx toolkit	eq	10.3.0
citrix:xenmobile_mdx_toolkit	citrix xenmobile mdx toolkit	eq	10.3.5

References

support.citrix.com/article/CTX214006

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2016-5109

cvelist1 nvd1 prion1 citrix1