Critical Citrix Bugs Impact All ADM Servers, Agents

Citrix ADM vulnerabilities could lead to admin password reset and disruption of ADM license service, company warns.

Dark Reading Staff, Dark Reading

June 15, 2022

1 Min Read
Person entering multi-factor authentication to access account on laptop
Source: Tero Vesalanien via Alamy

Citrix is advising users of its Application Delivery Management (ADM) solutions to update their systems against a pair of newly discovered vulnerabilities. 

Tracked under CVE-2022-27511, the first vulnerability could allow system corruption leading to the admin password being reset after reboot. The second, CVE-2022-27512, if exploited, could allow a threat actor to temporarily disrupt the ADM license service. 

Although a fix has been issued, customers using outdated, unsupported versions are advised by Citrix to upgrade. 

Also, "Citrix strongly recommends that network traffic to the Citrix ADM’s IP address is segmented, either physically or logically, from standard network traffic," the vulnerability notice from Citrix recommended. "Doing so diminishes the risk of exploitation of these issues."

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights