9.8 Critical

CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Weakness CWE-284

Description

Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.

Affected products and versions

Product	Affected versions	Fixed in
Citrix ShareFile Storage Zones Controller	5.11.20	No fix stated

The 3 CVEs of Citrix ShareFile Storage Zones Controller →

CVE-2021-22932 An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes… Not rated CVE-2021-22891 A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3,… Not rated

Do you use Citrix ShareFile Storage Zones Controller?

Track this CVE Watch Citrix ShareFile Storage Zones Controller Check my SBOMs

www.cveye.io/en/cve/CVE-2021-22941

Timeline

Published September 23, 2021
Added to the KEV catalogue March 25, 2022
Last modified October 21, 2025

References

support.citrix.com support.citrix.com

Track this CVE

CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability

Active exploitation observed

Description

Affected products and versions

Other CVEs of Citrix ShareFile Storage Zones Controller