Citrix Receiver / Receiver Desktop Lock version 4.5 suffers from an authentication bypass vulnerability.