Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

mood · May 6, 2020

Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets
May 5, 2020
https://thehackernews.com/2020/05/citrix-sharefile-vulnerability.html

Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform.

The security advisory—about which The Hacker News learned from Dimitri van de Giessen, an ethical hacker and system engineer—is scheduled to be available publicly later today on the Citrix website.
Citrix ShareFile is an enterprise-level file sharing solution for businesses using which employees can securely exchange proprietary and sensitive business data with each other.

The newly identified security issues (CTX-CVE-2020-7473) specifically affect customer-managed on-premises Citrix ShareFile storage zone controllers, a component that stores corporate data behind the firewall.
Click to expand...

Where the Flaw Resides?
At the time of writing, though not much technical details on the underlying vulnerabilities are available, an initial patch inspection by Dimitri reveals that at least one of the flaws could have resided in an old ASP.net Toolkit that Citrix Sharefile used.

According to the advisory, if exploited, the vulnerabilities could allow an unauthenticated attacker to compromise the storage zones controller potentially and access sensitive ShareFile documents and folders.
Click to expand...

Log in or Sign up

Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

mood Updates Team

Log in or Sign up

Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

mood Updates Team

Useful Searches