Citrix · Content Collaboration
CVE-2023-24489
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
Nedir
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
CISA: Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
Ne yapmalı
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 6 Eylül 2023
Citrix için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 4 Eki 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Yüksek 8,7 | 11% |
| 27 Eyl 2026 | Improper Input Validation | NetScaler | Kritik 9,5 | 82% |
| 27 Eyl 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Kritik 9,5 | 78% |
| 9 Eyl 2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | Kritik 9,3 | 33% |
| 26 Ağu 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | Yüksek 8,8 | 1,0% |
| 30 Mar 2026 | Out-of-Bounds Read | NetScaler | Kritik 9,3 | 91% |
| 26 Ağu 2025 | Memory Overflow | NetScaler | Kritik 9,2 | 21% |
| 25 Ağu 2025 | Improper Privilege Management | Session Recording | Orta 5,1 | 3,5% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.