SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2016-5109

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring…

MEDIUM 4.3EPSS 0.34%

Does this matter?

Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.

Description

Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass in-application Apple Touch ID authentication via unspecified vectors, related to an application requiring re-authentication.

CVSS 3.0
4.3 MEDIUMCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0.34% probability · 27th percentile
CISA KEV
Not listed
Weakness
CWE-284
Affected
citrix/xenmobile mdx toolkit · citrix/worx home
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.