cve-2022-27518
HIGH cisa_known_exploited
Description
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
Timeline
- Published
- 2022-12-13
- Last Modified
- 2022-12-13
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 0.0,
"datePublished": "2022-12-13",
"dateUpdated": "2022-12-13",
"description": "Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.",
"dueDate": "2023-01-03",
"id": "CVE-2022-27518",
"kev_catalogs": [
"cisa"
],
"knownRansomwareCampaignUse": "Unknown",
"notes": "https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/; https://nvd.nist.gov/vuln/detail/CVE-2022-27518",
"product": "Application Delivery Controller (ADC) and Gateway",
"requiredAction": "Apply updates per vendor instructions.",
"severity": "HIGH",
"source": "cisa_known_exploited",
"title": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability",
"vendor": "Citrix"
}
Enrichment data
Aggregated bundle (all enrichments)