CVE-2021-22927

🗓️ 05 Aug 2021 20:16:42Reported by hackeroneType

A session fixation vulnerability in Citrix ADC and Citrix Gateway 13.0-82.4

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Citrix ADC and Citrix Gateway Multiple Vulnerabilities (CTX319135)	27 Oct 202200:00	–	nessus
CNNVD	Citrix Application Delivery Controller授权问题漏洞	20 Jul 202100:00	–	cnnvd
Citrix	Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update	19 Jul 202112:09	–	citrix
Cvelist	CVE-2021-22927	5 Aug 202120:16	–	cvelist
EUVD	EUVD-2021-10056	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Citrix ADC, Gateway and SDWAN WAN-OP	19 Jul 202100:00	–	ncsc
NVD	CVE-2021-22927	5 Aug 202121:15	–	nvd
OSV	CVE-2021-22927	5 Aug 202121:15	–	osv
Prion	Session fixation	5 Aug 202121:15	–	prion
RedhatCVE	CVE-2021-22927	22 May 202518:22	–	redhatcve

NVD

Node

citrix application_delivery_controller_firmwareRange11.1–11.1-65.22

citrix application_delivery_controller_firmwareRange12.1–12.1-62.27

citrix application_delivery_controller_firmwareRange13.0–13.0-82.45

AND

citrix application_delivery_controllerMatch-

Node

citrix application_delivery_controller_firmwareRange12.1–12.1-55.238

AND

citrix mpx/sdx_14030_fipsMatch-

citrix mpx/sdx_14060_fipsMatch-

citrix mpx/sdx_14080_fipsMatch-

citrix mpx_15030-50g_fipsMatch-

citrix mpx_15040-50g_fipsMatch-

citrix mpx_15060-50g_fipsMatch-

citrix mpx_15080-50g_fipsMatch-

citrix mpx_15100-50g_fipsMatch-

citrix mpx_15120-50g_fipsMatch-

citrix mpx_8905_fipsMatch-

citrix mpx_8910_fipsMatch-

citrix mpx_8920_fipsMatch-

Node

citrix gatewayRange12.1–12.1-62.27

citrix gatewayRange13.0–13.0-82.45

citrix netscaler_gatewayRange11.1–11.1-65.22

[
  {
    "product": "Citrix ADC, Citrix Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 13.0-82.45 and later releases of 13.0"
      },
      {
        "status": "affected",
        "version": "Citrix ADC and Citrix Gateway 12.1-62.27 and later releases of 12.1"
      },
      {
        "status": "affected",
        "version": "Citrix ADC and NetScaler Gateway 11.1-65.22 and later releases of 11.1"
      },
      {
        "status": "affected",
        "version": "Citrix ADC 12.1-FIPS 12.1-55.247 and later releases of 12.1-FIPS"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX319135

21 Nov 2024 05:50Current

7.8High risk

Vulners AI Score7.8

CVSS 25.8

CVSS 3.18.1

EPSS0.00269

CWE-384