CVE Vulnerabilities

CVE-2022-27510

Authentication Bypass Using an Alternate Path or Channel

Published: Nov 08, 2022 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Unauthorized access to Gateway user capabilities

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Name Vendor Start Version End Version
Gateway Citrix 12.1 (including) 12.1-65.21 (excluding)
Gateway Citrix 13.0 (including) 13.0-88.12 (excluding)
Gateway Citrix 13.1 (including) 13.1-33.41 (excluding)

Potential Mitigations

References