MSRXVulnerabilities / CVE-2021-22920
CVE-2021-22920
Published 2021-08-05 · published (not yet in NVD)
CVE-2021-22920
—
not scored yet
not scored yet
0.9%
chance of exploitation in the next 30 days (EPSS; higher than 60% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 60% of CVEs)
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session.
Affected products
- n/a Citrix ADC, Citrix Gateway: Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0; Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1
Weakness: CWE-284
1 references (advisories, patches, write-ups)
- https://support.citrix.com/article/CTX319135 · x_refsource_MISC
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.