CVE-2021-22941 Citrix ShareFile Improper Access Control
An unauthenticated attacker can remotely compromise the Citrix ShareFile storage zones controller due to improper access control.
- Exploited in the wild
- Since 25 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22941?
CVE-2021-22941 is a critical authentication bypass vulnerability in Citrix ShareFile storage zones controller, published on 23 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Weakness: CWE-284
Which versions are affected by CVE-2021-22941?
It affects 1 product.
Products include Citrix Sharefile Storagezones Controller.
How do I fix CVE-2021-22941?
No fix has been published for CVE-2021-22941 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 15 Apr 2022.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-22941 being exploited?
Yes. Attackers have exploited CVE-2021-22941 in the wild since at least 25 Mar 2022, including in ransomware campaigns.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in Citrix ShareFile storage zones controller
Sources
Also known as GHSA-83fg-h4qw-7574.