Citrix Products Multiple Vulnerabilities

Impact

• Security Restriction Bypass

System / Technologies affected

• Citrix ADC and Citrix Gateway 13.1 before 13.1-33.47
• Citrix ADC and Citrix Gateway 13.0 before 13.0-88.12
• Citrix ADC and Citrix Gateway 12.1 before 12.1.65.21
• Citrix ADC 12.1-FIPS before 12.1-55.289
• Citrix ADC 12.1-NDcPP before 12.1-55.289

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

• The vendor has issued a fix:
  Citrix ADC and Citrix Gateway 13.1-33.47 and later releases 
  Citrix ADC and Citrix Gateway 13.0-88.12 and later releases of 13.0  
  Citrix ADC and Citrix Gateway 12.1-65.21 and later releases of 12.1  
  Citrix ADC 12.1-FIPS 12.1-55.289 and later releases of 12.1-FIPS  
  Citrix ADC 12.1-NDcPP 12.1-55.289 and later releases of 12.1-NDcPP

For details: https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

Vulnerability Identifier

• CVE-2022-27510
• CVE-2022-27513
• CVE-2022-27516

Source

• Bleeping Computer
• Citrix

Related Link

• https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516
• https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-critical-adc-gateway-auth-bypass/amp/