CVE-2021-22914 Information disclosure in Citrix Cloud Connector
Attackers can read sensitive credentials from log files if installed via command line, potentially gaining access to the Citrix Cloud environment.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22914?
CVE-2021-22914 is a high-severity vulnerability in Citrix Cloud Connector, published on 16 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer.
Weakness: CWE-922
Which versions are affected by CVE-2021-22914?
It affects 1 product.
Products include Citrix Cloud Connector.
How do I fix CVE-2021-22914?
No fix has been published for CVE-2021-22914 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22914 being exploited?
There is no known exploitation of CVE-2021-22914 in the wild and no public exploit code.
Sources
Also known as GHSA-mvwx-m8xx-54c6.