https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

The remote Citrix ADC or Citrix Gateway device is version 12.1.x prior to 12.1-65.21, 13.0.x prior to 13.0-88.12 or 13.1.x prior to 13.1-33.47. It may, therefore, be affected by multiple vulnerabilities, as follows:

  - User login brute force protection functionality bypass. (CVE-2022-27516)

  - Remote desktop takeover via phishing. (CVE-2022-27513)

  - Unauthorized access to Gateway user capabilities. (CVE-2022-27510)

Please refer to advisory CTX463706 for more information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

CVE-2022-27516

critical

Tenable Plugins

critical