10
CVE-2021-22941
- EPSS 88.62%
- Veröffentlicht 23.09.2021 13:15:08
- Zuletzt bearbeitet 13.03.2025 20:43:32
- Quelle support@hackerone.com
- Teams Watchlist Login
- Unerledigt Login
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Sharefile Storagezones Controller Version < 5.11.20
25.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog
Citrix ShareFile Improper Access Control Vulnerability
SchwachstelleImproper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.
BeschreibungApply updates per vendor instructions.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 88.62% | 0.995 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.