CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

Code injection

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...

Code injection

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

Remote code execution

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

CVE-2020-8983

CVE-2020-8983 describes an arbitrary file write vulnerability in all versions of Citrix ShareFile StorageZones Controller, enabling remote code execution and broad file access in hosted ShareFile environments. Exploitation depends on the storage zone creation version (5.9.0, 5.8.0, 5.7.0, 5.6.0, ...

CVE-2020-8983

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

CVE-2020-8982

An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud...

CVE-2020-8982

Summary: CVE-2020-8982 affects Citrix ShareFile StorageZones (Controller) versions through at least 5.10.x. It constitutes an unauthenticated arbitrary file read that can grant access to files stored in ShareFile or Citrix Cloud deployments. The issue’s exploitability depends on the storage zone ...

CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...

CVE-2020-7473

CVE-2020-7473 refers to unauthenticated access to documents/folders in Citrix ShareFile StorageZones Controller. According to the description, exploitability depends on the product version used when the storage zone was created, not the version at assessment time. The vulnerability can be trigger...

Citrix Systems Citrix ShareFile storage zones Controller path traversal vulnerability (CNVD-2020-41790)

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems. storage zones Controller is one of the storage zone controllers. A path traversal vulnerability exists in Citrix Systems Citrix ShareFile storage zones Controller. An attacker can exploit this vulnerability to access...

Citrix Systems Citrix ShareFile storage zones Controller path traversal vulnerability

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems, Inc. storage zones Controller is one of the storage zones controllers. A path traversal vulnerability exists in Citrix Systems Citrix ShareFile storage zones Controller. An attacker can exploit this vulnerability to...

Citrix Systems Citrix ShareFile storage zones Controller path traversal vulnerability (CNVD-2020-41789)

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems. storage zones Controller is one of the storage zone controllers. A security vulnerability exists in Citrix Systems Citrix ShareFile storage zones Controller. An attacker could exploit this vulnerability to access...

Time synchronization issues on Windows VMs with the 9.x Citrix VM Tools

On Windows VMs with the xeniface 9.0.0.11 or 9.1.0.4 driver installed, the VM time can become unsynchronized when the time set by the Citrix VM Tools conflicts with the Windows VM's own time synchronization for example, using Active Directory or NTP...

StoreFront - Citrix Subscriptions Store service not starting up on one storefront server in server group

When launching a published application an error message israndomly seen . "Your apps are not available at this time. Please try again in a few minutes or contact your help desk with this information: Cannot contact Storefront" The issue is caused by subscription service store service not starting...

Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...

Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...

Citrix ShareFile storage zones Controller multiple security updates

Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...

Target Device running on VMware going into hung state with Event - Too many retries Initiate reconnect

Please consider below scenarios and symptoms: VMware6.7 hosts the Target devices. VMXNet3 is attached to the Target devices. Intermittently the Target Devices go into a hung state. Review of the Wireshark trace shows that the Target Device is constantly reconnecting with the Citrix Provisioning...