CVE-2018-16969

Citrix ShareFile StorageZones Controller prior to 5.4.2 has CVE-2018-16969: Information Exposure Through an Error Message. The issue affects all supported versions before 5.4.2 and can disclose local file system paths via error messages. Exploitation requires a compromised or malicious ShareFile ...

CVE-2018-16968

CVE-2018-16968 affects Citrix ShareFile StorageZones Controller prior to version 5.4.2. The issue is described as a directory traversal vulnerability that could allow a compromised ShareFile user to write arbitrary files on the local filesystem (as the Active Directory user) and to read full path...