CVE-2022-27516: User login brute force protection functionality bypass
Published Nov 8, 2022
·Updated
User login brute force protection functionality bypass
Affected Software
9 affected components
Citrix Gateway>=12.1<12.1-65.21
Citrix Gateway>=13.0<13.0-88.12
Citrix Gateway>=13.1<13.1-33.47
Citrix Application Delivery Controller Firmware>=12.1<12.1-65.21
Citrix Application Delivery Controller Firmware>=13.0<13.0-88.12
Citrix Application Delivery Controller Firmware>=13.1<13.1-33.47
Citrix Application Delivery Controller
Citrix Application Delivery Controller Firmware>=12.1<12.1-55.289
Citrix Application Delivery Controller Firmware>=12.1<12.1-55.289
Event History
Nov 8, 2022
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-27516?
CVE-2022-27516 is a vulnerability that allows bypassing user login brute force protection functionality in Citrix Gateway and Citrix Application Delivery Controller Firmware.
2
How severe is CVE-2022-27516?
CVE-2022-27516 is classified as critical with a severity score of 9.8.
3
Which software is affected by CVE-2022-27516?
Citrix Gateway and Citrix Application Delivery Controller Firmware versions 12.1-65.21 to 13.1-33.47 are affected by CVE-2022-27516.
4
How can I fix CVE-2022-27516?
Apply the security patch provided by Citrix as mentioned in their security bulletin.
5
Where can I find more information about CVE-2022-27516?
You can find more information about CVE-2022-27516 in the Citrix Gateway and Citrix ADC security bulletin.