PT-2021-15276 · Citrix · Citrix Gateway+2

Published 2021-08-05 · Updated 2021-08-13 · CVE-2021-22920

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway) (affected versions not specified) Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO

Description A vulnerability has been discovered in the mentioned Citrix products. If exploited, it could lead to a phishing attack through a SAML authentication hijack, allowing attackers to steal a valid user session.

Recommendations For Citrix ADC and Citrix Gateway, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2021-22920

Affected Products

Citrix Adc

Citrix Gateway

Citrix Sd-Wan Wanop Edition

References · 4

• https://osv.dev/vulnerability/CVE-2021-22920 · Vendor Advisory
• https://support.citrix.com/article/CTX319135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22920 · Security Note
• https://t.me/cvenotify/19293 · Telegram Post