Lucene search

[email protected]CVE-2022-27510

HistoryNov 08, 2022 - 10:15 p.m.

CVE-2022-27510

2022-11-0822:15:00

CWE-287

[email protected]

web.nvd.nist.gov

592

cve-2022-27510

unauthorized access

gateway user capabilities

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.9%

JSON

Unauthorized access to Gateway user capabilities

CPENameOperatorVersion
citrix:gatewaycitrix gatewaylt12.1-65.21
citrix:gatewaycitrix gatewaylt13.0-88.12
citrix:gatewaycitrix gatewaylt13.1-33.41
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwarelt12.1-65.21
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwarelt13.0-88.12
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwarelt13.1-33.47
citrix:application_delivery_controller_firmwarecitrix application delivery controller firmwarelt12.1-55.289

CPE	Name	Operator	Version
citrix:gateway	citrix gateway	lt	12.1-65.21
citrix:gateway	citrix gateway	lt	13.0-88.12
citrix:gateway	citrix gateway	lt	13.1-33.41
citrix:application_delivery_controller_firmware	citrix application delivery controller firmware	lt	12.1-65.21
citrix:application_delivery_controller_firmware	citrix application delivery controller firmware	lt	13.0-88.12
citrix:application_delivery_controller_firmware	citrix application delivery controller firmware	lt	13.1-33.47
citrix:application_delivery_controller_firmware	citrix application delivery controller firmware	lt	12.1-55.289

References

support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

48.9%

JSON

Related for CVE-2022-27510

prion1 thn2 nessus1 rapid7blog1 citrix1