CVE-2022-27518 - Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Vulnerability Name

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/

https://nvd.nist.gov/vuln/detail/CVE-2022-27518

Related News Articles

State hackers turn to massive ORB proxy networks to evade detectionMay 23, 2024