Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2022-27518
HistoryDec 13, 2022 - 12:00 a.m.

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

2022-12-1300:00:00
CISA
www.cisa.gov
33
citrix
adc
gateway
authentication
bypass
vulnerability
saml
administrator
code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.205

Percentile

96.4%

JSON

Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.

Related

rapid7blog 1
attackerkb 1
cisa 1
nessus 1
wizblog 1
cve 1
nvd 1
prion 1
cvelist 1
citrix 1
thn 3
githubexploit 1
trellix 2
qualysblog 1
rapid7blog
rapid7blog
CVE-2022-27518: Critical Fix Released for Exploited Citrix ADC, Gateway Vulnerability
2022-12-13 23:19:21
attackerkb
attackerkb
CVE-2022-27518
2022-12-13 00:00:00
cisa
cisa
Citrix Releases Security Updates for Citrix ADC, Citrix Gateway
2022-12-13 00:00:00
nessus
nessus
Citrix ADC and Citrix Gateway RCE (CTX474995)
2022-12-13 00:00:00
wizblog
wizblog
CVE-2022-27518 exploited in the wild by APT5: everything you need to know
2022-12-13 21:03:18
cve
cve
CVE-2022-27518
2022-12-13 17:15:14
nvd
nvd
CVE-2022-27518
2022-12-13 17:15:14
prion
prion
Remote code execution
2022-12-13 17:15:00
cvelist
cvelist
CVE-2022-27518 Unauthenticated remote arbitrary code execution
2022-12-13 00:00:00
citrix
citrix
Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518
2022-12-13 12:01:35
thn
thn
Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities
2022-12-29 09:43:00
Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability
2022-12-14 04:40:00
From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022
2023-03-21 09:54:00
githubexploit
githubexploit
Exploit for Code Injection in Citrix Netscaler Application Delivery Controller
2023-07-20 16:05:07
trellix
trellix
The Bug Report December 2022 Edition
2023-01-04 00:00:00
The Bug Report December 2022 Edition
2023-01-04 00:00:00
qualysblog
qualysblog
Qualys Threat Research Unit: Threat Thursdays, December 2022
2022-12-29 19:05:19

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.205

Percentile

96.4%

JSON
Related for CISA-KEV-CVE-2022-27518
rapid7blog1attackerkb1cisa1nessus1wizblog1cve1nvd1prion1cvelist1citrix1thn3githubexploit1trellix2qualysblog1