Lucene search
CISACISA-KEV-CVE-2023-24489HistoryAug 16, 2023 - 12:00 a.m.
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
2023-08-1600:00:00
CISA
www.cisa.gov
4
citrix
content collaboration
sharefile
improper access control
vulnerability
unauthenticated attacker
remote compromise
customer-managed
storage zones controllers
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
Related
citrix
citrix
ShareFile StorageZones Controller Security Update for CVE-2023-24489
2023-06-13 13:03:38
malwarebytes
malwarebytes
cvelist
cvelist
CVE-2023-24489
2023-07-10 21:11:39
prion
prion
Design/Logic Flaw
2023-07-10 22:15:00
nuclei
nuclei
githubexploit
githubexploit
attackerkb
attackerkb
CVE-2023-24489
2023-07-10 00:00:00
nvd
nvd
CVE-2023-24489
2023-07-10 22:15:09
cve
cve
CVE-2023-24489
2023-07-10 22:15:09
nessus
nessus
ShareFile Documents Unauthenticated Access (CTX559517)
2023-08-17 00:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.973
Percentile
99.9%
Related for CISA-KEV-CVE-2023-24489