CVE-2021-22920: Medium severity Citrix Application Delivery Management vulnerability
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22920?
CVE-2021-22920 is a vulnerability discovered in Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.
What is the severity of CVE-2021-22920?
The severity of CVE-2021-22920 is medium, with a CVSS score of 6.5.
What can happen if CVE-2021-22920 is exploited?
If CVE-2021-22920 is exploited, it could lead to a phishing attack through a malicious link.
Which software versions are affected by CVE-2021-22920?
CVE-2021-22920 affects Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway) versions 12.1-62.25 and 13.0-82.42, as well as Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.
How can I fix CVE-2021-22920?
To fix CVE-2021-22920, it is recommended to update to the latest available versions of Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP Edition.