CRITICAL🇵🇱 Wersja polska

CVE-2022-27510

CVSS 9.8v3.1pub. 2022-11-08upd. 2024-11-21

Unauthorized access to Gateway user capabilities

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Citrix Application Delivery Controller

    HW
    Citrix
    all versions

  • Citrix Application Delivery Controller Firmware

    OS
    Citrix
    12.1 – 12.1-55.289 (excl.)12.1 – 12.1-65.21 (excl.)13.0 – 13.0-88.12 (excl.)13.1 – 13.1-33.47 (excl.)

  • Citrix Gateway

    APP
    Citrix
    13.1 – 13.1-33.41 (excl.)12.1 – 12.1-65.21 (excl.)13.0 – 13.0-88.12 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-27518CRITICAL9.8⚠ KEVPL ✓same product

RCE bez uwierzytelnienia w Citrix ADC i Citrix Gateway

CVE-2019-19781CRITICAL9.8⚠ KEVPL ✓same product

Path Traversal w Citrix ADC i Gateway umożliwiający RCE

CVE-2019-18225CRITICAL9.8PL ✓same product

Citrix ADC i Gateway — obejście uwierzytelnienia przez interfejs zarządzania

CVE-2018-7218CRITICAL9.8PL ✓same product

RCE w funkcji AppFirewall Citrix NetScaler ADC i NetScaler Gateway

CVE-2022-27508HIGH7.5same product

Unauthenticated denial of service