CVE-2022-21827: 
Citrix Gateway Plug-in vulnerability analysis and mitigation

An improper privilege vulnerability (CVE-2022-21827) was discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) versions prior to 21.9.1.2. This vulnerability could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed to corrupt or delete files with SYSTEM privileges (MITRE CVE, NVD).

The vulnerability exists due to improper privilege handling in the Citrix Gateway Plug-in for Windows. When exploited, it allows an attacker with local access to perform file operations with elevated SYSTEM privileges, potentially compromising system integrity (SecurityWeek).

If successfully exploited, this vulnerability allows an attacker with local access to corrupt or delete files with SYSTEM privileges, potentially leading to system instability or data loss (MITRE CVE).

The vulnerability requires local access to a computer with Citrix Gateway Plug-in installed to be exploited. This means an attacker must first gain access to the target system through other means before being able to exploit this vulnerability (NVD).

Citrix has released patches to address this vulnerability. Users are advised to upgrade to Citrix Gateway Plug-in for Windows version 21.9.1.2 or later. The patched version can be found in the latest iterations of Citrix ADC and Gateway (SecurityWeek).