CVE-2022-27518

Produto

Citrix / Application Delivery Controller (ADC) and Gateway

Vulnerabilidade

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Adicionado ao KEV

13 de dez. de 2022

Corrigir até

3 de jan. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/; https://nvd.nist.gov/vuln/detail/CVE-2022-27518