Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities

Thousands of Citrix Application Delivery Controller ADC and Gateway endpoints remain vulnerable to two critical security flaws disclosed by the company over the last few months. The issues in question are CVE-2022-27510 and CVE-2022-27518 CVSS scores: 9.8, which were addressed by the virtualizati...

CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities

On November 8, 2022, Citrix published Citrix Gateway and Citrix ADC Security Bulletin for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516 announcing fixes for three vulnerabilities: CVE-2022-27510 “Unauthorized access to Gateway user capabilities” CVE-2022-27513 “Remote desktop takeover via...

Citrix Issues Patches for Critical Flaw Affecting ADC and Gateway Products

Citrix has released security updates to address a critical authentication bypass flaw in the application delivery controller ADC and Gateway products that could be exploited to take control of affected systems. Successful exploitation of the issues could enable an adversary to gain authorized...

CVE-2022-27510

Unauthorized access to Gateway user capabilities...

CVE-2022-27510

CVE-2022-27510 affects Citrix ADC and Citrix Gateway (Gateway) with unauthorized access to Gateway user capabilities. According to CTX463706, affected versions are Citrix ADC/Gateway 12.1.x before 12.1-65.21 (12.1-FIPS before 12.1-55.289), 13.0.x before 13.0-88.12, and 13.1.x before 13.1-33.47. T...

CVE-2022-27510 Unauthorized access to Gateway user capabilities

Unauthorized access to Gateway user capabilities...

CVE-2022-27510

creationtimestamp| type| source ---|---|--- 2022-11-08 19:50:16+00:00| seen| https://t.me/cKure/10382 2022-11-08 21:54:53+00:00| seen| Telegram/vIZjlKRmTVOu4u-rU3xW7TZC7oekoViYQG3Lcwz9AcFtsBE 2022-11-09 11:45:41+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus21/2022 2022-11-0...

Citrix Gateway and Citrix ADC Security Bulletin for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516

Vulnerabilities have been discovered in Citrix Gateway and Citrix ADC, listed below. Note that only appliances that are operating as a Gateway SSL VPN, ICA Proxy, CVPN, RDP Proxy are affected by the first issue, which is rated as a Critical severity vulnerability. CVE-ID| Description| CWE| Affect...