cve-2022-27518

HIGH cisa_known_exploited
Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Timeline
Published
2022-12-13
Last Modified
2022-12-13
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2022-12-13",
  "dateUpdated": "2022-12-13",
  "description": "Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.",
  "dueDate": "2023-01-03",
  "id": "CVE-2022-27518",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/;  https://nvd.nist.gov/vuln/detail/CVE-2022-27518",
  "product": "Application Delivery Controller (ADC) and Gateway",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "cisa_known_exploited",
  "title": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability",
  "vendor": "Citrix"
}
Enrichment data
View JSON API Download JSON