about Citrix ADC and Citrix Gateway are affected by a important auth bypassSecurity Affairs will cowl the newest and most present suggestion roughly the world. achieve entry to slowly consequently you comprehend capably and appropriately. will improve your data proficiently and reliably
Citrix launched safety updates to deal with a important authentication bypass vulnerability in Citrix ADC and Citrix Gateway.
Citrix urges prospects to put in safety updates to deal with a important authentication bypass subject, tracked as CVE-2022-27510, on the Citrix ADC and Citrix Gateway.
The corporate addressed the next three vulnerabilities:
- CVE-2022-27510 – The flaw is an authentication bypass utilizing an alternate path or channel, which will be triggered by an attacker to achieve unauthorized entry to the Gateway consumer capabilities. The corporate famous that solely units that operate as a gateway (units that use SSL VPN performance or are carried out as an ICA proxy with authentication enabled) are affected.
- CVE-2022-27513: The flaw is inadequate verification of knowledge authenticity, an attacker can exploit the flaw to attain a distant desktop takeover by way of phishing assaults. The vulnerability will be exploited provided that the system is configured as a VPN (Gateway) and RDP proxy performance is configured.
- CVE-2022-27516: The vulnerability is a bypass of the consumer login brute power safety performance. The flaw will be exploited provided that the system is configured as a VPN (Gateway) or AAA digital server with the “Max Login Makes an attempt” setting.
Please be aware that solely gateway units (units that use SSL VPN performance or are carried out as an ICA proxy with authentication enabled) are affected by the primary subject, which is categorized as a important severity vulnerability. “. learn the safety bulletin printed by Citrix.
The vendor recommends putting in the related up to date variations as quickly as attainable:
- Citrix ADC and Citrix Gateway 13.1-33.47 and later variations
- Citrix ADC and Citrix Gateway 13.0-88.12 and later variations of 13.0
- Citrix ADC and Citrix Gateway 12.1-65.21 and later variations of 12.1
- Citrix ADC 12.1-FIPS 12.1-55.289 and later variations of 12.1-FIPS
- Citrix ADC 12.1-NDcPP 12.1-55.289 and later variations of 12.1-NDcPP
The three vulnerabilities affecting each Citrix Gateway and Citrix ADC are as follows:
The corporate notes that ADC and Gateway variations previous to 12.1 are EOL and recommends that prospects of these variations improve to one of many supported variations.
“Clients utilizing Citrix-managed cloud companies don’t must take any motion.” The bulletin concludes.
Observe me on twitter: @security issues Y Fb
Pierluigi Paganini
(SecurityIssues – hacking, Citrix)
share on
I want the article very almost Citrix ADC and Citrix Gateway are affected by a important auth bypassSecurity Affairs provides perspicacity to you and is beneficial for surcharge to your data
Citrix ADC and Citrix Gateway are affected by a critical auth bypassSecurity Affairs
