VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 5, 2021· Updated Jun 17, 2026

CVE-2021-22920

CVE-2021-22920

Description

A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session.

Affected products

8
  • Citrix Systems/Application Delivery Management2 versions
    cpe:2.3:a:citrix:application_delivery_management:12.1-62.25:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citrix:application_delivery_management:12.1-62.25:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:application_delivery_management:13.0-82.42:*:*:*:*:*:*:*
  • Citrix Systems/Gateway3 versions
    cpe:2.3:a:citrix:gateway:12.1-62.25:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:citrix:gateway:12.1-62.25:*:*:*:*:*:*:*
    • cpe:2.3:a:citrix:gateway:13.0-82.42:*:*:*:*:*:*:*
    • (no CPE)
  • Citrix/ADC / Gatewaydescription
  • Citrix Systems/SD-WAN WANOP Editionllm-create
    Range: 4000-WO, 4100-WO, 5000-WO, and 5100-WO
  • Citrix Systems/ADCllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.