CVE-2021-22941

KEV · Ransomware

Citrix ShareFile Improper Access Control Vulnerability

Vendor / Project: Citrix
Product: ShareFile
Date added: Mar 25, 2022
Due date: Apr 15, 2022
Known ransomware use: Known
CWEs: CWE-284

Description

Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-22941