ShareFile Documents Unauthenticated Access (CTX269106)

Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access ShareFile users’...

CVE-2020-7473: Improper Limitation of a Pathname to a Restricted Directory

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

CVE-2020-8983: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

CVE-2020-8982: Improper Limitation of a Pathname to a Restricted Directory

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968: Improper Limitation of a Pathname to a Restricted Directory

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969: Exposure of Sensitive Information to an Unauthorized Actor

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...