CRITICAL

CVE-2021-22941

Citrix Sharefile Storagezones Controller 2021-09-23 CVSS v3.1

CVSS

9.8

KEV

Description

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

Summary dbcve.org

Improper Access Control vulnerability in Citrix ShareFile storage zones controller versions prior to 5.11.20 allows an unauthenticated attacker to remotely compromise the storage zones controller due to missing or inadequate access control checks.

Mitigation

Upgrade Citrix ShareFile storage zones controller to version 5.11.20 or later to remediate the improper access control vulnerability.

Weakness (CWE)

CWE-284 Improper Access Control

EPSS Score

53.59%

Probability of exploitation in next 30 days

99th percentile

References

https://support.citrix.com/article/CTX328123 Broken Link, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22941 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE