CVE-2022-27518—Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

漏洞名称

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

描述

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/
• https://nvd.nist.gov/vuln/detail/CVE-2022-27518

相关新闻文章

• State hackers turn to massive ORB proxy networks to evade detectionMay 22, 2024

相关 CWE

• CWE-664