Citrix Sharefile Storagezones Controller vulnerabilities
8 known vulnerabilities affecting citrix/sharefile_storagezones_controller.
Total CVEs
8
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL2HIGH4MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2021-22941CRITICALCVSS 9.8KEVfixed in 5.11.202021-09-23
CVE-2021-22941 [CRITICAL] CWE-284 CVE-2021-22941: Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an una
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
nvd
CVE-2021-22932HIGHCVSS 7.5fixed in 5.11.192021-08-16
CVE-2021-22932 [HIGH] CWE-311 CVE-2021-22932: An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones con
An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-
nvd
CVE-2021-22891CRITICALCVSS 9.8≥ 5.7, < 5.7.3≥ 5.8, ≤ 5.8.3+3 more2021-05-27
CVE-2021-22891 [CRITICAL] CWE-862 CVE-2021-22891: A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7
A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.
nvd
CVE-2020-7473HIGHCVSS 7.5≤ 5.5.0v5.6.0+3 more2020-05-07
CVE-2020-7473 [HIGH] CWE-22 CVE-2020-7473: In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller,
In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on the product version that was in use when a particular setup
nvd
CVE-2020-8982HIGHCVSS 7.5PoC≤ 5.5.0v5.6.0+3 more2020-05-07
CVE-2020-8982 [HIGH] CVE-2020-8982: An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones
An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud itself (both are internet facing). NOTE: unlike most CVEs, exploit
nvd
CVE-2020-8983HIGHCVSS 7.5≤ 5.5.0v5.6.0+3 more2020-05-07
CVE-2020-8983 [HIGH] CVE-2020-8983: An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage z
An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or inside Citrix Cloud itself (both are internet facing). NOTE: unli
nvd
CVE-2018-16969MEDIUMCVSS 4.3fixed in 5.4.22018-09-26
CVE-2018-16969 [MEDIUM] CWE-200 CVE-2018-16969: Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Mess
Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message.
nvd
CVE-2018-16968LOWCVSS 3.1fixed in 5.4.22018-09-26
CVE-2018-16968 [LOW] CWE-22 CVE-2018-16968: Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
nvd