Firetruck

CVE-2022-27518

KEV

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

View CVE record →
Vendor / Project
Citrix
Product
Application Delivery Controller (ADC) and Gateway
Date added
Dec 13, 2022
Due date
Jan 3, 2023
Known ransomware use
Unknown
CWEs
CWE-664

Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Required action

Apply updates per vendor instructions.

Notes