CVE-2019-7217: High severity citrix vulnerability
Published May 13, 2019
·Updated
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.
Affected Software
1 affected component
Citrix ShareFile<19.12
Event History
May 13, 2019
CVE Published
via MITRE·06:08 PM
Data Sourced
via MITRE·06:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-7217?
CVE-2019-7217 has a medium severity rating due to its potential for user enumeration.
2
How do I fix CVE-2019-7217?
To fix CVE-2019-7217, upgrade Citrix ShareFile to version 19.12 or later.
3
What does CVE-2019-7217 allow an attacker to do?
CVE-2019-7217 allows an attacker to enumerate application usernames based on different server responses.
4
Is authentication required to exploit CVE-2019-7217?
No, no authentication is required to exploit CVE-2019-7217.
5
Which versions of Citrix ShareFile are affected by CVE-2019-7217?
CVE-2019-7217 affects Citrix ShareFile versions before 19.12.