critical9.8Known exploited
CVE-2021-22941
Citrix ShareFile Improper Access Control Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Impact
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Sharefile Storagezones Controller | before 5.11.20 |