CRITICAL🇵🇱 Wersja polska

CVE-2022-27510

CVSS 9.8v3.1pub. 2022-11-08upd. 2024-11-21

Unauthorized access to Gateway user capabilities

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Citrix Application Delivery Controller

    HW
    Citrix
    wszystkie wersje

  • Citrix Application Delivery Controller Firmware

    OS
    Citrix
    12.1 – 12.1-55.289 (bez)12.1 – 12.1-65.21 (bez)13.0 – 13.0-88.12 (bez)13.1 – 13.1-33.47 (bez)

  • Citrix Gateway

    APP
    Citrix
    13.1 – 13.1-33.41 (bez)12.1 – 12.1-65.21 (bez)13.0 – 13.0-88.12 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-27518CRITICAL9.8⚠ KEVten sam produkt

Unauthenticated remote arbitrary code execution

CVE-2019-19781CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, an...

CVE-2019-18225CRITICAL9.8ten sam produkt

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11...

CVE-2018-7218CRITICAL9.8ten sam produkt

The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 b...

CVE-2022-27508HIGH7.5ten sam produkt

Unauthenticated denial of service