Read the docs
TI-2021-05793 Aliases CVE-2021-22932GHSA-72xq-94wh-w6jc

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile…

Priority LOW 33CWE-311Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-311.

Summary

An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. ShareFile customers who have not run the CTX269106 mitigation tool or who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue.

Why it matters now

EPSS 0.00411 35th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Citrix ShareFile Storage Zones ControllerCitrix ShareFile storage zones controller CTX269106 mitigation tool—No fix listedCNA
  • Citrix ShareFile Storage Zones Controller Vendor— Affected Citrix ShareFile storage zones controller CTX269106 mitigation tool Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:citrix:sharefile_storagezones_controller:*:*:*:*:*:*:*:*before 5.11.19VulnerableCitrix
  • cpe:2.3:a:citrix:sharefile_storagezones_controller:*:*:*:*:*:*:*:* Versions before 5.11.19 Vulnerable ·Citrix

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-22932
  2. 2026-10-03 Alias added: GHSA-72xq-94wh-w6jc

References

Advisory 1

  • TI-2021-05802 Improper access control in Citrix ShareFile storage zones controller KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-07206 An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile… CVSS 3.1HIGH 7.5
  • TI-2020-05996 In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones)… CVSS 3.1HIGH 7.5
  • TI-2021-05752 Missing authorization in Citrix ShareFile Storage Zones Controller CVSS 3.1CRITICAL 9.8
  • TI-2020-07207 An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones… CVSS 3.1HIGH 7.5
  • TI-2018-12122 Citrix ShareFile StorageZones Controller before 5.4.2 has Information Exposure Through an Error Message. CVSS 3.0MEDIUM 4.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences