151 matches found
Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets
Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...
Citrix ShareFile storage zones Controller multiple security updates
Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...
ShareFile Enterprise - UMT is unable to sync new users created in AD
The user is trying to create an Admin service account that's not leveraging SAML authentication. However, the account is not syncing within the UMT console...
CVE-2019-7218
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...
CVE-2019-7217
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...
CVE-2019-7218
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...
CVE-2019-7217
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...
Cross site request forgery (csrf)
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...
Authentication flaw
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...
CVE-2019-7218
Citrix ShareFile vulnerable to a downgrade of authentication from two-factor to one-factor for versions before 19.23. An attacker who has access to the victim’s OTP token or authenticator app could bypass the username/password step and log in with username/OTP only. The issue affects the 2FA logi...
CVE-2019-7218
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app like google authenticator is able to bypass the first authentication phase username/password mechanism an...
CVE-2019-7217
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...
CVE-2019-7217
Summary: CVE-2019-7217 affects Citrix ShareFile prior to version 19.12, enabling user enumeration through OTP-check endpoints without authentication. Affected component appears to be the authentication/OTP verification flow, where server responses disclose whether a given username exists. The cit...
A Breach, or Just a Forced Password Reset?
Software giant Citrix Systems recently forced a password reset for many users of its Sharefile content collaboration service, warning it would be doing this on a regular basis in response to password-guessing attacks that target people who re-use passwords across multiple Web sites. Many Sharefil...
How to update SAML certificate settings for Sharefile SSO using XenMobile
You can configure XenMobile and ShareFile to use Security Assertion Markup Language SAML to provide single sign-on SSO access to ShareFile mobile apps. For this you need to configure the SAML certificate...
CVE-2018-16968
Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...
CVE-2018-16969
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...
CVE-2018-16969
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...
CVE-2018-16968
Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...
Design/Logic Flaw
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...