CVE-2021-22932
First published: Mon Aug 16 2021(Updated: )
An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. ShareFile customers who have not run the CTX269106 mitigation tool or who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue.
Credit: support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix ShareFile StorageZones Controller | <5.11.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-22932?
CVE-2021-22932 is an issue identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller, causing the ShareFile file encryption option to become disabled if it had previously been enabled.
Who is affected by CVE-2021-22932?
Customers using Citrix ShareFile storage zones controller version up to 5.11.19 are affected by CVE-2021-22932.
How severe is CVE-2021-22932?
CVE-2021-22932 has a severity rating of 7.5 (High).
How can I fix CVE-2021-22932?
To fix CVE-2021-22932, Citrix ShareFile customers should refer to the mitigation tool CTX269106 provided by Citrix.
Where can I find more information about CVE-2021-22932?
You can find more information about CVE-2021-22932 in the Citrix support article CTX322787.
- collector/nvd-index
- vendor/citrix
- canonical/citrix sharefile storagezones controller