PT-2021-15282 · Citrix · Citrix Sharefile Storagezones Controller

Published 2021-08-16 · Updated 2021-08-31 · CVE-2021-22932

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Citrix ShareFile storage zones controller (affected versions not specified)

Description An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller, causing the ShareFile file encryption option to become disabled if it had previously been enabled. This issue affects customers who previously selected Enable Encryption in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool.

Recommendations For customers who have run the CTX269106 mitigation tool and had previously enabled encryption, re-select the Enable Encryption setting to re-enable file encryption. For customers who have not run the CTX269106 mitigation tool or who re-selected Enable Encryption immediately after running the tool, no action is required as they are unaffected by this issue.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2021-22932

Affected Products

Citrix Sharefile Storagezones Controller

References · 4

• https://osv.dev/vulnerability/CVE-2021-22932 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22932 · Security Note
• https://support.citrix.com/article/CTX322787 · Vendor Advisory
• https://t.me/cibsecurity/27402 · Telegram Post