PT-2021-15258 · Citrix · Citrix Sharefile Storagezones Controller

Published 2021-05-27 · Updated 2021-08-12 · CVE-2021-22891

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix ShareFile Storage Zones Controller versions prior to 5.7.3 Citrix ShareFile Storage Zones Controller versions prior to 5.8.3 Citrix ShareFile Storage Zones Controller versions prior to 5.9.3 Citrix ShareFile Storage Zones Controller versions prior to 5.10.1 Citrix ShareFile Storage Zones Controller versions prior to 5.11.18

Description A missing authorization issue exists in the software, potentially allowing unauthenticated remote compromise of the Storage Zones Controller.

Recommendations For versions prior to 5.7.3, update to version 5.7.3 or later. For versions prior to 5.8.3, update to version 5.8.3 or later. For versions prior to 5.9.3, update to version 5.9.3 or later. For versions prior to 5.10.1, update to version 5.10.1 or later. For versions prior to 5.11.18, update to version 5.11.18 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-22891

Affected Products

Citrix Sharefile Storagezones Controller

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-22891 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22891 · Vendor Advisory
• https://support.citrix.com/article/CTX310780 · Vendor Advisory
• https://t.me/cvenotify/15798 · Telegram Post