CVE-2021-22941 — Citrix ShareFile Improper Access Control Vulnerability
CVE-2021-22941: Citrix ShareFile Improper Access Control Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Citrix |
| Product | ShareFile |
| Date added | 2022-03-25 |
| Due date | 2022-04-15 |
| Ransomware campaign use | Known |
Description
Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-22941
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-22941
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog