CVE-2021-22941

CVE-2021-22941 affects Citrix ShareFile Storage Zones Controller prior to version 5.11.20 and is due to Improper Access Control. An unauthenticated attacker could remotely compromise the storage zones controller, with an endpoint exposure at /ShareFile/StorageCenter/Upload.aspx and potential for ...

CVE-2020-8982

Summary: CVE-2020-8982 affects Citrix ShareFile StorageZones (Controller) versions through at least 5.10.x. It constitutes an unauthenticated arbitrary file read that can grant access to files stored in ShareFile or Citrix Cloud deployments. The issue’s exploitability depends on the storage zone ...

CVE-2020-7473

CVE-2020-7473 refers to unauthenticated access to documents/folders in Citrix ShareFile StorageZones Controller. According to the description, exploitability depends on the product version used when the storage zone was created, not the version at assessment time. The vulnerability can be trigger...

CVE-2020-8983

CVE-2020-8983 describes an arbitrary file write vulnerability in all versions of Citrix ShareFile StorageZones Controller, enabling remote code execution and broad file access in hosted ShareFile environments. Exploitation depends on the storage zone creation version (5.9.0, 5.8.0, 5.7.0, 5.6.0, ...

CVE-2021-22932

CVE-2021-22932 affects Citrix ShareFile storage zones controller via the CTX269106 mitigation tool, which can disable the encryption option if it had been enabled. Affected users who previously selected “Enable Encryption” and did not re-select after running CTX269106 may see encryption disabled;...

CVE-2021-22891

CVE-2021-22891 affects Citrix ShareFile storage zones controller. The issue is an unauthenticated remote compromise due to improper resource control in affected versions: 5.7 before 5.7.3, 5.8 before 5.8.3, 5.9 before 5.9.3, 5.10 before 5.10.1, and 5.11 before 5.11.18. Citrix provides fixes in 5....

CVE-2018-16968

CVE-2018-16968 affects Citrix ShareFile StorageZones Controller prior to version 5.4.2. The issue is described as a directory traversal vulnerability that could allow a compromised ShareFile user to write arbitrary files on the local filesystem (as the Active Directory user) and to read full path...

CVE-2018-16969

Citrix ShareFile StorageZones Controller prior to 5.4.2 has CVE-2018-16969: Information Exposure Through an Error Message. The issue affects all supported versions before 5.4.2 and can disclose local file system paths via error messages. Exploitation requires a compromised or malicious ShareFile ...