Citrix ShareFile Storage Zones Controller Security Update

A security issue has been identified in Citrix ShareFile storage zones controller which, if exploited, would allow an unauthenticated attacker to remotely compromise the storage zones controller.

The issue has been given the following identifier:

CVE-ID	Description	Type	Pre-requisites
CVE-2021-22941	Improper resource control allows unauthenticated remote compromise	CWE-284: Improper Access Control	Network access to the ShareFile storage zones controller

All currently supported versions of Citrix ShareFile storage zones controller before 5.11.20 are affected by this issue.

Customers using Citrix-managed storage zones in the cloud are not affected by this issue.

This issue has been addressed in the following versions of Citrix ShareFile storage zones controller:

• ShareFile storage zones controller 5.11.20 and later versions

Citrix strongly recommends that customers upgrade to a fixed version as soon as possible.

The latest version of Citrix ShareFile storage zones controller is available from the following Citrix website location:
https://www.citrix.com/downloads/sharefile/
 

Citrix would like to thank Markus Wulftange of Code White GmbH for working with us to help protect Citrix customers.

Citrix is notifying customers and channel partners about this potential security issue through the publication of this security bulletin on the Citrix Knowledge Center at https://support.citrix.com/securitybulletins.