Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Citrix · Application Delivery Controller (ADC) and Gateway
Date added (CISA)
2022-12-13
Remediation due
2023-01-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.