Incorrect access control mechanisms in Citrix Receiver Desktop Lock 4.5 allow an attacker to bypass the authentication requirement by leveraging physical access to a VDI for temporary disconnection. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Citrix
Authentication Bypass
Receiver Desktop
NVD
VulDB
Exploit-DB
CVSS 3.0
6.8
EPSS
2.6%