CVE-2021-22927

CVE-2021-22927

Vendor N/A

Product Citrix ADC, Citrix Gateway

Weakness CWE-384 · Session fixation

Published August 5, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.

Key dates

02Disclosure timeline

August 5, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22927 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/384.html

Related vulnerabilities

Identifiers

CVE CVE-2021-22927

CWE CWE-384

Affected versions

Vendor N/A

Product Citrix ADC, Citrix Gateway

Affected Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0

Vendor N/A

Product Citrix ADC, Citrix Gateway

Affected Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1

Vendor N/A

Product Citrix ADC, Citrix Gateway

Affected Citrix ADC and NetScaler Gateway 11.1-65.22 and later releases of 11.1

Vendor N/A

Product Citrix ADC, Citrix Gateway

Affected Citrix ADC 12.1-FIPS 12.1-55.247 and later releases of 12.1-FIPS

01Description

02Disclosure timeline

03References

04Related CVE