NetSight
high8.1

CVE-2021-22927

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijac…

Impact

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.

Affected products

VendorProductAffected versions
CitrixApplication Delivery Controller Firmware
from 11.1 before 11.1-65.22
from 12.1 before 12.1-62.27
from 13.0 before 13.0-82.45
from 12.1 before 12.1-55.238
CitrixGateway
from 12.1 before 12.1-62.27
from 13.0 before 13.0-82.45
CitrixNetscaler Gateway
from 11.1 before 11.1-65.22

Weakness classification

References