CVE-2021-22956

An uncontrolled resource consumption vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22956

CVE-2021-22956 is an uncontrolled resource consumption vulnerability in Citrix ADC and related appliances that can be triggered by an attacker with management-interface access (NSIP/SNIP) to cause a temporary disruption of the Management GUI, Nitro API, and RPC communications. The issue affects m...

CVE-2021-22955

A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...

CVE-2021-22955

CVE-2021-22955 is an unauthenticated DoS vulnerability affecting Citrix ADC and Citrix Gateway (and relatedly Citrix SD-WAN WANOP in related CVE-2021-22956) when appliances are configured as a VPN/Gateway or AAA virtual server. Affected versions include 13.0 before 83.27, 12.1 before 63.22, 11.1 ...

How to add text message on Gateway logon page that AAA authentication enabled.

In AAA authentication profiled configured Gateway Virtual server, you may found the rewrite policy method to addsome texts on Netscaler Gateway logon page is no longer effective. This is because the portal layout mechanism is changed compared with basic authentication policy scenario. Before we g...

MaxClient on Httpd

As highlighted athttps://support.citrix.com/article/CTX330728,it is possible for a malicious actor totemporarily disruptthe performance oftheManagementGUI, NitroAPI, and RPC communicationonCitrixADC, CitrixGateway, and Citrix SD-WAN WANOP Edition appliancesunlessthe appliancehas been...

Vulnerabilities fixed in Citrix ADC, Gateway and SD-WAN WANOP Edition

Citrix has fixed two vulnerabilities in Citrix Application Delivery Controller ADC, Citrix Gateway and Citrix SD-WAN WANOP Edition. The vulnerabilities allow a remote malicious party to able to cause a denial-of-service DoS. The vulnerability with reference CVE-2021-22955 is located in Citrix ADC...

Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability

Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability...

How to Create a Self-Signed SAN Certificate Using OpenSSL on Citrix ADC Appliance

This article describes how to create a self-signed SAN certificate with multiple subject alternate names...

How to Configure an LDAP Monitor on Citrix ADC

This article describes how to configure an LDAP monitor on Citrix ADC...

ERROR: Operation not permitted - no FIPS card present in the system

Attempting to check FIPS status on the Citrix ADC MPX 8900 FIPS certified appliance or the Citrix ADC MPX 15000-50G FIPS certified appliance using the show fips command results in the error message "ERROR: Operation not permitted - no FIPS card present in the system."...

LDAP Bind Account Requirements for Citrix ADC and Citrix Gateway Authentication Features

When using the Lightweight Directory Access Protocol LDAP for authentication features of Citrix ADC and Citrix Gateway, not all accounts can function as the LDAP bind account. Some minimum requirements are necessary when configuring features that use LDAP Authentication such as Citrix ADC system...

CVE-2021-22927

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session...

CVE-2021-22920

A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway, and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a...

Session fixation

A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session...

CVE-2021-22919

A vulnerability has been discovered in Citrix ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway, and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk...

CVE-2021-22927

CVE-2021-22927 affects Citrix ADC and Citrix Gateway when configured as a SAML Service Provider. The vulnerability is a session fixation flaw that could allow an attacker to hijack a user session. Affected versions include Citrix ADC/Gateway 13.0 before 13.0-82.45 (and older 12.1/11.1 lines as li...

XenMobile Android Enterprise & iOS devices failed to enroll after ADC upgrade to 13.0-82.41+ or 12.1-62.23+

In a deployment of Citrix ADC Gateway + XenMobile Server on-premise. When Citrix ADC upgrade to 13.0-82.41+ or12.1-62.23+ version or XenMobile Android Enterprise and iOS device enrollment will fail...

How to monitor xenserver resource utilization on Citrix ADC

How to monitor xenserver resource utilization on Citrix ADC...

Citrix ADC and Citrix NetScaler Gateway Multiple Vulnerabilities (CTX297155)

The remote Citrix ADC or Citrix NetScaler Gateway device is version 11.1.x prior to 11.1-65.20, 12.1.x prior to 12.1-62.23, 12.1-FIPS prior to 12.1-55.238 or 13.0.x prior to 13.0-82.41. It is, therefore, affected by multiple vulnerabilities: - Network-based denial-of-service from within the same...