CVE-2021-22891: Critical severity Citrix ShareFile StorageZones Controller vulnerability

Q: What is the severity of CVE-2021-22891?

The severity of CVE-2021-22891 is critical with a CVSS score of 9.8.

Q: What is the affected software for CVE-2021-22891?

The affected software for CVE-2021-22891 is Citrix ShareFile Storage Zones Controller versions 5.7 to 5.11.18.

Q: How can an unauthenticated remote compromise the Storage Zones Controller in CVE-2021-22891?

An unauthenticated remote attacker can exploit the vulnerability in CVE-2021-22891 to compromise the Citrix ShareFile Storage Zones Controller.

Q: Is there a fix available for CVE-2021-22891?

Yes, Citrix has released fixes for CVE-2021-22891. It is recommended to update to Citrix ShareFile Storage Zones Controller versions 5.7.3, 5.8.3, 5.9.3, 5.10.1, or 5.11.18.

Q: Where can I find more information about CVE-2021-22891?

More information about CVE-2021-22891 can be found on the Citrix support website at https://support.citrix.com/article/CTX310780.

Published May 27, 2021

Updated

A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.

Affected Software

5 affected components

Citrix ShareFile StorageZones Controller>=5.7<5.7.3

Citrix ShareFile StorageZones Controller>=5.8<=5.8.3

Citrix ShareFile StorageZones Controller>=5.9<5.9.3

Citrix ShareFile StorageZones Controller>=5.10<5.10.1

Citrix ShareFile StorageZones Controller>=5.11<5.11.18

Remediation

Patch Available

https://support.citrix.com/article/CTX310780

Event History

May 27, 2021

CVE Published

via MITRE·11:15 AM

Data Sourced

via MITRE·11:15 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-22891?

The severity of CVE-2021-22891 is critical with a CVSS score of 9.8.

What is the affected software for CVE-2021-22891?