PT-2021-7657 · Citrix · Citrix Sharefile

Published 2021-09-14 · Updated 2022-08-31 · CVE-2021-22941

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Citrix ShareFile versions prior to 5.11.20

Description The issue is related to improper access control in Citrix ShareFile storage zones controller, which may allow an unauthenticated attacker to remotely compromise the storage zones controller. This could impact the confidentiality, integrity, and availability of protected information. The vulnerability has been exploited by the PROPHET SPIDER group to deliver a webshell.

Recommendations For versions prior to 5.11.20, update to version 5.11.20 or later to resolve the issue. As a temporary workaround, consider restricting access to the storage zones controller to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2023-01048

CVE-2021-22941

Affected Products

Citrix Sharefile

References · 20

• 🔥 https://github.com/greyshell/exploit_dev · Exploit
• 🔥 https://github.com/hoavt184/CVE-2021-22941 · Exploit
• https://support.citrix.com/article/CTX328123 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22941 · Security Note
• https://bdu.fstec.ru/vul/2023-01048 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22941 · Vendor Advisory
• https://t.me/cvenotify/35488 · Telegram Post
• https://t.me/apt_notes/342 · Telegram Post
• https://t.me/ptswarm/73 · Telegram Post
• https://t.me/cvenotify/21949 · Telegram Post
• https://t.me/cybersecuritytechnologies/4350 · Telegram Post
• https://t.me/sysadm_in_channel/3399 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22941 · Note
• https://t.me/thebugbountyhunter/5672 · Telegram Post