CVE-2021-22927
First published: Thu Aug 05 2021(Updated: )
A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Application Delivery Controller Firmware | >=11.1<11.1-65.22 | |
| Citrix Application Delivery Controller Firmware | >=12.1<12.1-62.27 | |
| Citrix Application Delivery Controller Firmware | >=13.0<13.0-82.45 | |
| Citrix Application Delivery Controller | ||
| Citrix Application Delivery Controller Firmware | >=12.1<12.1-55.238 | |
| Citrix Mpx\/sdx 14030 Fips | ||
| Citrix Mpx\/sdx 14060 Fips | ||
| Citrix Mpx\/sdx 14080 Fips | ||
| Citrix Mpx 15030-50g Fips | ||
| Citrix Mpx 15040-50g Fips | ||
| Citrix Mpx 15060-50g Fips | ||
| Citrix Mpx 15080-50g Fips | ||
| Citrix Mpx 15100-50g Fips | ||
| Citrix Mpx 15120-50g Fips | ||
| Citrix Mpx 8905 Fips | ||
| Citrix Mpx 8910 Fips | ||
| Citrix Mpx 8920 Fips | ||
| Citrix Gateway | >=12.1<12.1-62.27 | |
| Citrix Gateway | >=13.0<13.0-82.45 | |
| Citrix NetScaler Gateway | >=11.1<11.1-65.22 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-22927.
What is the severity of CVE-2021-22927?
The severity of CVE-2021-22927 is high (8.1).
What is the affected software for CVE-2021-22927?
The affected software for CVE-2021-22927 is Citrix ADC and Citrix Gateway 13.0-82.45.
What is the description of CVE-2021-22927?
CVE-2021-22927 is a session fixation vulnerability that exists in Citrix ADC and Citrix Gateway when configured as a SAML service provider, allowing an attacker to hijack a session.
How can I fix CVE-2021-22927?
To fix CVE-2021-22927, update Citrix ADC and Citrix Gateway to a version that is not affected by the vulnerability.
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- vendor/citrix
- canonical/citrix application delivery controller firmware
- version/citrix application delivery controller firmware/11.1
- version/citrix application delivery controller firmware/12.1
- version/citrix application delivery controller firmware/13.0
- canonical/citrix application delivery controller
- canonical/citrix mpx\/sdx 14030 fips
- canonical/citrix mpx\/sdx 14060 fips
- canonical/citrix mpx\/sdx 14080 fips
- canonical/citrix mpx 15030-50g fips
- canonical/citrix mpx 15040-50g fips
- canonical/citrix mpx 15060-50g fips
- canonical/citrix mpx 15080-50g fips
- canonical/citrix mpx 15100-50g fips
- canonical/citrix mpx 15120-50g fips
- canonical/citrix mpx 8905 fips
- canonical/citrix mpx 8910 fips
- canonical/citrix mpx 8920 fips
- canonical/citrix gateway
- version/citrix gateway/12.1
- version/citrix gateway/13.0
- canonical/citrix netscaler gateway
- version/citrix netscaler gateway/11.1