CVE-2016-9111

Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection of a LAN cable. NOTE: as of 20161208, the vendor could not reproduce the issue, stating "the researcher was unable to provide us with information that would allow us to confirm the behaviour and, despite extensive investigation on test deployments of supported products, we were unable to reproduce the behaviour as he described. The researcher has also, despite additional requests for information, ceased to respond to us."

• CWE-254
• CWE-284

• http://www.securityfocus.com/bid/94229Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037176
• https://packetstormsecurity.com/files/139493/Citrix-Receiver-Receiver-Desktop-Lock-4.5-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.93250Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/40686/Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/94229Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037176
• https://packetstormsecurity.com/files/139493/Citrix-Receiver-Receiver-Desktop-Lock-4.5-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.93250Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/40686/Exploit, Third Party Advisory, VDB Entry

Published

Nov 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9104Multiple integer overflows in the (1) v9fs_xattr_read and (2…4.4
• CVE-2016-9105Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEM…6
• CVE-2016-9106Memory leak in the v9fs_write function in hw/9pfs/9p.c in QE…6
• CVE-2016-9107The OTR plugin for Gajim sends information in cleartext when…
• CVE-2016-9108Integer overflow in the js_regcomp function in regexp.c in A…7.5
• CVE-2016-9109Artifex Software MuJS allows attackers to cause a denial of …
• CVE-2016-9112Floating Point Exception (aka FPE or divide by zero) in opj_…
• CVE-2016-9113There is a NULL pointer dereference in function imagetobmp o…
• CVE-2016-9114There is a NULL Pointer Access in function imagetopnm of con…
• CVE-2016-9115Heap Buffer Over-read in function imagetotga of convert.c(jp…
• CVE-2016-9116NULL Pointer Access in function imagetopnm of convert.c:2226…
• CVE-2016-9117NULL Pointer Access in function imagetopnm of convert.c(jp2)…