CVE-2022-27518: Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
Other sources
Unauthenticated remote arbitrary code execution
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable SAML Service Provider (SP) and Identity Provider (IdP) configurations on affected Citrix ADC and Gateway appliances if they are not required. The vulnerability occurs when ADC/Gateway is configured with SAML SP or IdP and can allow an authentication bypass leading to unauthenticated remote arbitrary code execution.
Citrix Application Delivery Controller (ADC) / Gateway SAML SP/IdP configuration = disabled - Compensating control
Restrict network access to Citrix ADC/Gateway management interfaces and SAML endpoints to trusted IP ranges via firewall rules, ACLs, VPN or network segmentation until a vendor fix is available. This reduces exposure to unauthenticated remote attacks that could lead to code execution.
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-27518.
What is the title of this vulnerability?
The title of this vulnerability is Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability.
What is the affected software?
The affected software is Citrix Application Delivery Controller (ADC) and Gateway.
How does the vulnerability work?
The vulnerability allows an attacker to execute code as an administrator by bypassing authentication when Citrix Application Delivery Controller (ADC) and Gateway are configured with SAML SP or IdP configuration.
Is there a fix available for this vulnerability?
Yes, a critical security update is available for Citrix ADC and Citrix Gateway to address this vulnerability.