Medium severity6.5NVD Advisory· Published Jun 16, 2021· Updated Jun 17, 2026
CVE-2020-8300
CVE-2020-8300
Description
Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.
Affected products
7- cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*Range: >=11.1,<11.1-65.20
- cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*Range: >=11.1,<11.1-65.20
- Citrix/ADCdescription
- Range: <12.1-55.238
- Range: <13.0-82.41, <12.1-62.23, <11.1-65.20
- Range: <13.0-82.41, <12.1-62.23, <11.1-65.20
Patches
Vulnerability mechanics
References
1- support.citrix.com/article/CTX297155nvdVendor Advisory
News mentions
0No linked articles in our index yet.