CVE-2019-7217

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required...

A Breach, or Just a Forced Password Reset?

Software giant Citrix Systems recently forced a password reset for many users of its Sharefile content collaboration service, warning it would be doing this on a regular basis in response to password-guessing attacks that target people who re-use passwords across multiple Web sites. Many Sharefil...

How to update SAML certificate settings for Sharefile SSO using XenMobile

You can configure XenMobile and ShareFile to use Security Assertion Markup Language SAML to provide single sign-on SSO access to ShareFile mobile apps. For this you need to configure the SAML certificate...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

Directory traversal

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

Design/Logic Flaw

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16969

Citrix ShareFile StorageZones Controller prior to 5.4.2 has CVE-2018-16969: Information Exposure Through an Error Message. The issue affects all supported versions before 5.4.2 and can disclose local file system paths via error messages. Exploitation requires a compromised or malicious ShareFile ...

CVE-2018-16968

CVE-2018-16968 affects Citrix ShareFile StorageZones Controller prior to version 5.4.2. The issue is described as a directory traversal vulnerability that could allow a compromised ShareFile user to write arbitrary files on the local filesystem (as the Active Directory user) and to read full path...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

Citrix ShareFile StorageZones Control Directory Traversal Vulnerability

Citrix ShareFile is a file sharing solution from Citrix Systems, Inc.StorageZones Controller is one of the private data storage controllers. A path traversal vulnerability exists in Citrix ShareFile StorageZones Controller versions prior to 5.4.2. A remote attacker can exploit this vulnerability ...

Troubleshooting Checklist: In the ShareFile app, Secure Mail, or Secure Notes, the following error appears: "Your connection is unavailable. Only offline files can be accessed."

Do the following: Collect client logs and then open Sharefiledebuglog.txt. Check the logs, if you see the following: The operation couldn’t be completed. Cannot initiate login API call. Is the device connected to the Internet? Added user to DB, success: no If present, the MDX policy related to th...

CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

CVE-2014-1910 affects Citrix ShareFile Mobile for Android and ShareFile Mobile for Tablets prior to version 2.4.4. The vulnerability is due to improper SSL certificate validation (X.509) which can allow MITM attackers to spoof servers and exfiltrate data. Citrix advisories (CTX140303) and NVD/NVD...