CVE-2021-22927: High severity Citrix Application Delivery Controller Firmware vulnerability
Published Aug 5, 2021
·Updated
A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.
Affected Software
20 affected components
Citrix Application Delivery Controller Firmware>=11.1<11.1-65.22
Citrix Application Delivery Controller Firmware>=12.1<12.1-62.27
Citrix Application Delivery Controller Firmware>=13.0<13.0-82.45
Citrix Application Delivery Controller
Citrix Application Delivery Controller Firmware>=12.1<12.1-55.238
Citrix Mpx\/sdx 14030 Fips
Citrix Mpx\/sdx 14060 Fips
Citrix Mpx\/sdx 14080 Fips
Citrix Mpx 15030-50g Fips
Citrix Mpx 15040-50g Fips
Citrix Mpx 15060-50g Fips
Citrix Mpx 15080-50g Fips
Citrix Mpx 15100-50g Fips
Citrix Mpx 15120-50g Fips
Citrix Mpx 8905 Fips
Citrix Mpx 8910 Fips
Citrix Mpx 8920 Fips
Citrix Gateway>=12.1<12.1-62.27
Citrix Gateway>=13.0<13.0-82.45
Citrix NetScaler Gateway>=11.1<11.1-65.22
Event History
Aug 5, 2021
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-22927.
2
What is the severity of CVE-2021-22927?
The severity of CVE-2021-22927 is high (8.1).
3
What is the affected software for CVE-2021-22927?
The affected software for CVE-2021-22927 is Citrix ADC and Citrix Gateway 13.0-82.45.
4
What is the description of CVE-2021-22927?
CVE-2021-22927 is a session fixation vulnerability that exists in Citrix ADC and Citrix Gateway when configured as a SAML service provider, allowing an attacker to hijack a session.
5
How can I fix CVE-2021-22927?
To fix CVE-2021-22927, update Citrix ADC and Citrix Gateway to a version that is not affected by the vulnerability.