PT-2022-15160 · Citrix · Citrix Gateway Plug-In For Windows

Published 2022-05-26 · Updated 2022-06-08 · CVE-2022-21827

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix Gateway Plug-in for Windows versions prior to 21.9.1.2

Description An improper privilege issue has been found that could allow an attacker with local access to a computer to corrupt or delete files as SYSTEM.

Recommendations For versions prior to 21.9.1.2, update to version 21.9.1.2 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-21827

Affected Products

Citrix Gateway Plug-In For Windows

References · 3

• https://support.citrix.com/article/CTX341455 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21827 · Security Note