CVE-2020-7473

In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on the product version that was in use when a particular setup step was performed, NOT the product version that is in use during a current assessment of a CVE consumer's product inventory. Specifically, the vulnerability can be exploited if a storage zone was created by one of these product versions: 5.9.0, 5.8.0, 5.7.0, 5.6.0, 5.5.0, or earlier. This CVE differs from CVE-2020-8982 and CVE-2020-8983 but has essentially the same risk.

• CWE-22

• https://support.citrix.com/article/CTX269106Vendor Advisory
• https://support.citrix.com/article/CTX269106Vendor Advisory

Published

May 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7467In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r3…7.6
• CVE-2020-7468In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r3…8.8
• CVE-2020-7469In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r3…7.5
• CVE-2020-7470Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XS…4.8
• CVE-2020-7471Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 befor…9.8
• CVE-2020-7472An authorization bypass and PHP local-file-include vulnerabi…9.8
• CVE-2020-7474A CWE-427: Uncontrolled Search Path Element vulnerability ex…7.8
• CVE-2020-7475A CWE-74: Improper Neutralization of Special Elements in Out…9.8
• CVE-2020-7476A CWE-426: Untrusted Search Path vulnerability exists in Zig…7.8
• CVE-2020-7477A CWE-754: Improper Check for Unusual or Exceptional Conditi…7.5
• CVE-2020-7478A CWE-22: Improper Limitation of a Pathname to a Restricted …7.5
• CVE-2020-7479A CWE-306: Missing Authentication for Critical Function vuln…7.8