CVE-2021-22932
Last modified
CVE-2021-22932 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. ShareFile customers who have not run the CTX269106 mitigation tool or who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Sharefile Storagezones Controller | < 5.11.19 |
References
- https://support.citrix.com/article/CTX322787Vendor Advisory
- https://support.citrix.com/article/CTX322787Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-22932?
How severe is CVE-2021-22932?
How do I fix CVE-2021-22932?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-22927A session fixation vulnerability exists in Citrix ADC and Ci…8.1
- CVE-2021-22928A vulnerability has been identified in Citrix Virtual Apps a…7.8
- CVE-2021-22929An information disclosure exists in Brave Browser Desktop pr…6.1
- CVE-2021-2293Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
- CVE-2021-22930Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to…9.8
- CVE-2021-22931Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to…9.8
- CVE-2021-22933A vulnerability in Pulse Connect Secure before 9.1R12 could …6.5
- CVE-2021-22934A vulnerability in Pulse Connect Secure before 9.1R12 could …7.2
- CVE-2021-22935A vulnerability in Pulse Connect Secure before 9.1R12 could …7.2
- CVE-2021-22936A vulnerability in Pulse Connect Secure before 9.1R12 could …6.1
- CVE-2021-22937A vulnerability in Pulse Connect Secure before 9.1R12 could …7.2
- CVE-2021-22938A vulnerability in Pulse Connect Secure before 9.1R12 could …7.2
Are you affected by CVE-2021-22932?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST