CVE-2023-24489

NVD Published Date: July 10, 2023 at 10:15 PM

NVD Last Modified: July 18, 2023 at 06:19 PM

Download Patch

Vulnerability ID

CVE-2023-24489

Severity

CRITICAL

Severity Score

9.8

Summary

A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.

References

https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489

Mitigation and Patches

Exploits

https://github.com/adhikara13/CVE-2023-24489-ShareFile

https://github.com/codeb0ss/CVE-2023-24489-PoC

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

NVD-CWE-Other

Recent Publish

CVE-2023-29300

CVE-2023-3519

CVE-2023-38203

CVE-2023-35078

CVE-2023-35082

CVE-2023-36845

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2023-24489

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-24489

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action