Directory traversal

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

Design/Logic Flaw

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

CVE-2018-16968

CVE-2018-16968 affects Citrix ShareFile StorageZones Controller prior to version 5.4.2. The issue is described as a directory traversal vulnerability that could allow a compromised ShareFile user to write arbitrary files on the local filesystem (as the Active Directory user) and to read full path...

CVE-2018-16969

Citrix ShareFile StorageZones Controller prior to 5.4.2 has CVE-2018-16969: Information Exposure Through an Error Message. The issue affects all supported versions before 5.4.2 and can disclose local file system paths via error messages. Exploitation requires a compromised or malicious ShareFile ...

PT-2018-13802

Name of the Vulnerable Software and Affected Versions Citrix ShareFile StorageZones Controller versions prior to 5.4.2 Description The issue allows for information exposure through an error message. Recommendations For versions prior to 5.4.2, update to version 5.4.2 or later to resolve the issue...

PT-2018-13801

Name of the Vulnerable Software and Affected Versions Citrix ShareFile StorageZones Controller versions prior to 5.4.2 Description The issue allows Directory Traversal. Recommendations For versions prior to 5.4.2, update to version 5.4.2 or later to resolve the issue...

CVE-2018-16968: Improper Limitation of a Pathname to a Restricted Directory

Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal...

CVE-2018-16969: Exposure of Sensitive Information to an Unauthorized Actor

Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message...

Citrix ShareFile StorageZones Control Directory Traversal Vulnerability

Citrix ShareFile is a file sharing solution from Citrix Systems, Inc.StorageZones Controller is one of the private data storage controllers. A path traversal vulnerability exists in Citrix ShareFile StorageZones Controller versions prior to 5.4.2. A remote attacker can exploit this vulnerability ...

Troubleshooting Checklist: In the ShareFile app, Secure Mail, or Secure Notes, the following error appears: "Your connection is unavailable. Only offline files can be accessed."

Do the following: Collect client logs and then open Sharefiledebuglog.txt. Check the logs, if you see the following: The operation couldn’t be completed. Cannot initiate login API call. Is the device connected to the Internet? Added user to DB, success: no If present, the MDX policy related to th...

CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-1910

CVE-2014-1910 affects Citrix ShareFile Mobile for Android and ShareFile Mobile for Tablets prior to version 2.4.4. The vulnerability is due to improper SSL certificate validation (X.509) which can allow MITM attackers to spoof servers and exfiltrate data. Citrix advisories (CTX140303) and NVD/NVD...

PT-2014-4360

Name of the Vulnerable Software and Affected Versions Citrix ShareFile Mobile and ShareFile Mobile for Tablets versions prior to 2.4.4 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the software...

CVE-2014-1910: Undefined Security Weakness

Citrix ShareFile Mobile and ShareFile Mobile for Tablets before 2.4.4 for Android do not verify X.509 certificates from SSL servers, which allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...