CVE-2021-22920

Name of the Vulnerable Software and Affected Versions Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway) (affected versions not specified) Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO

Description A vulnerability has been discovered in the mentioned Citrix products. If exploited, it could lead to a phishing attack through a SAML authentication hijack, allowing attackers to steal a valid user session.

Recommendations For Citrix ADC and Citrix Gateway, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO, at the moment, there is no information about a newer version that contains a fix for this vulnerability.