Vulnerability · Published Jun 16, 2021 · Assigned by hackerone

CVE-2020-8300

Medium 6.5

In plain English

A medium-severity improper access control in Citrix ADC, Citrix Gateway. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.0% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)3.0%top 12.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.

Affected products (as reported)

Vendor	Product	Versions
n/a	Citrix ADC, Citrix Gateway	Fixed in Citrix ADC and Citrix Gateway 13.0 before 13.0-82.41, Citrix ADC and Citrix Gateway 12.1 before 12.1-62.23, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238

Weakness: CWE-284

References

https://support.citrix.com/article/CTX297155 x_refsource_MISC