CVE-2022-27518

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/; https://nvd.nist.gov/vuln/detail/CVE-2022-27518

Remediation deadline: January 3, 2023

Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Timeline

Published:December 13th, 2022 12:00 AM

Last modified:December 13th, 2022 12:00 AM

Added to KEV:December 13th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Citrix

Products

Application Delivery Controller (ADC) and Gateway

Weaknesses (CWE)

CWE-664

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute