CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-07-10
Citrix ShareFile Storage Zones Controller Authentication Bypass and Remote Code Execution (RCE) Vulnerability (CVE-2023-24489) Security Advisory
[Affected Scope] Citrix ShareFile Storage Zones Controller versions prior to 5.11.24
[Impact] Unauthenticated remote attackers can exploit a padding oracle vulnerability to bypass authentication, upload arbitrary files, and execute remote code with SYSTEM privileges
[Mitigation] Immediately upgrade customer-managed Storage Zones Controllers to version 5.11.24 or later, and restrict external access