CVE-2020-8982

Summary: CVE-2020-8982 affects Citrix ShareFile StorageZones (Controller) versions through at least 5.10.x. It constitutes an unauthenticated arbitrary file read that can grant access to files stored in ShareFile or Citrix Cloud deployments. The issue’s exploitability depends on the storage zone ...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

CVE-2020-7473

CVE-2020-7473 refers to unauthenticated access to documents/folders in Citrix ShareFile StorageZones Controller. According to the description, exploitability depends on the product version used when the storage zone was created, not the version at assessment time. The vulnerability can be trigger...

Citrix StorageZones Controller Improper Access Restrictions / Traversal Exploit

Citrix StorageZones Controller versions prior to 5.4.2 suffer from padding oracle, improper access restriction, and path traversal vulnerabilities. ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller...

Citrix StorageZones Controller Improper Access Restrictions / Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Citrix StorageZones Controller vulnerable version: all versions before 5.4.2 fixed version: 5.4.2 CVE number: CVE-2018-16968,...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

Directory traversal

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969

Citrix ShareFile StorageZones Controller prior to 5.4.2 has CVE-2018-16969: Information Exposure Through an Error Message. The issue affects all supported versions before 5.4.2 and can disclose local file system paths via error messages. Exploitation requires a compromised or malicious ShareFile ...

CVE-2018-16968

CVE-2018-16968 affects Citrix ShareFile StorageZones Controller prior to version 5.4.2. The issue is described as a directory traversal vulnerability that could allow a compromised ShareFile user to write arbitrary files on the local filesystem (as the Active Directory user) and to read full path...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

Citrix ShareFile StorageZones Control Directory Traversal Vulnerability

Citrix ShareFile is a file sharing solution from Citrix Systems, Inc.StorageZones Controller is one of the private data storage controllers. A path traversal vulnerability exists in Citrix ShareFile StorageZones Controller versions prior to 5.4.2. A remote attacker can exploit this vulnerability ...