First published: Thu May 26 2022(Updated: )
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Citrix Gateway Plug-in For Linux | <21.9.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-21827 has been classified as a high severity vulnerability due to its potential impact on system security.
To fix CVE-2022-21827, upgrade the Citrix Gateway Plug-in for Windows to a version later than 21.9.1.2.
CVE-2022-21827 affects users of Citrix Gateway Plug-in for Windows versions prior to 21.9.1.2.
CVE-2022-21827 allows an attacker with local access to corrupt or delete files with elevated SYSTEM privileges.
There are no known workarounds for CVE-2022-21827; the recommended action is to update the software.