CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer.

• CWE-922
• CWE-922

• https://support.citrix.com/article/CTX316690Vendor Advisory
• https://support.citrix.com/article/CTX316690Vendor Advisory

Published

Jun 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22909A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earli…7.5
• CVE-2021-2291Vulnerability in the Oracle VM VirtualBox product of Oracle …4.7
• CVE-2021-22910A sanitization vulnerability exists in Rocket.Chat server ve…9.8
• CVE-2021-22911A improper input sanitization vulnerability exists in Rocket…9.8
• CVE-2021-22912Nextcloud iOS before 3.4.2 suffers from an information discl…6.5
• CVE-2021-22913Nextcloud Deck before 1.2.7, 1.4.1 suffers from an informati…6.5
• CVE-2021-22915Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerab…9.8
• CVE-2021-22916In Brave Desktop between versions 1.17 and 1.26.60, when adb…5.9
• CVE-2021-22917Brave Browser Desktop between versions 1.17 and 1.20 is vuln…6.5
• CVE-2021-22918Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an …5.3
• CVE-2021-22919A vulnerability has been discovered in Citrix ADC (formerly …7.5
• CVE-2021-2292Vulnerability in the Oracle Document Management and Collabor…8.1