Lucene search

K
citrixCitrixCTX322787
HistoryAug 10, 2021 - 10:14 a.m.

Citrix ShareFile storage zones controller security update

2021-08-1010:14:19
support.citrix.com
130
citrix sharefile
storage zones controller
security update
disabled file encryption
ctx269106 mitigation
cwe-312
cleartext storage
access control
cve-2021-22932

EPSS

0.001

Percentile

43.6%

Anissuehasbeen identified intheCTX269106mitigation toolforCitrix ShareFilestorage zones controllerwhichcausestheShareFilefile encryptionoptiontobecomedisabledifit hadpreviouslybeenenabled.

Customers areonlyaffected by this issue if theypreviouslyselected “Enable Encryption”in the ShareFilestorage zones controllerconfiguration pageand did notre-selectthis settingafter running theCTX269106mitigation tool.ShareFile customers who have notruntheCTX269106mitigation toolor who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue.

Customers using Citrix ShareFilestorage zones controller 5.10.1 and above or 5.11.18 and above can check if they are affected by this issue by viewing theEncryptionServiceSettingsfile in theStorageLocation. IfIsEncryptionNeededis set toTruethen the storage zonescontroller is affected bythis issue.Affectedcustomers using5.11.19 or abovewholog-in to the ShareFilestorage zones controllerconfigurationpagewillalsobe presented with a pop-upwhichinformsthemthat they areaffectedby this issue.

CVE-ID Description Type Pre-requisites
CVE-2021-22932 File encryption isdisabled after runningCTX269106mitigation tool CWE-312: Cleartext Storage of Sensitive Information Access toanaffectedcustomer-managedShareFile storage zone

EPSS

0.001

Percentile

43.6%

Related for CTX322787