Skip to content
OpenAdvisories
Unscored CVE-2021-22927 EUVD-2021-10056GHSA-j95v-2qpj-v897

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow …

Published Aug 5, 2021 · Updated Aug 3, 2024 · Assigned by hackerone

Description

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.

Affected products

VendorProductAffectedFixed
— Citrix ADC, Citrix Gateway Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0, Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1, Citrix ADC and NetScaler Gateway 11.1-65.22 and later releases of 11.1, Citrix ADC 12.1-FIPS 12.1-55.247 and later releases of 12.1-FIPS —

References