CVE-2021-22927 Other in Citrix ADC, Citrix Gateway
Attackers can hijack sessions in Citrix ADC and Gateway when SAML is configured, leading to account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-22927?
CVE-2021-22927 is a high-severity vulnerability in Citrix ADC, Citrix Gateway, published on 5 Aug 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.
Weakness: CWE-384
Which versions are affected by CVE-2021-22927?
It affects 3 products.
Products include Citrix Application Delivery Controller Firmware, Citrix Gateway, Citrix Netscaler Gateway.
How do I fix CVE-2021-22927?
No fix has been published for CVE-2021-22927 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22927 being exploited?
There is no known exploitation of CVE-2021-22927 in the wild and no public exploit code.
Other vulnerabilities in Citrix ADC, Citrix Gateway
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure
Sources
Also known as GHSA-j95v-2qpj-v897.