Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2022-27518

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Description

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 3 Jan 2023.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.