Vulnerability Description
In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on the product version that was in use when a particular setup step was performed, NOT the product version that is in use during a current assessment of a CVE consumer's product inventory. Specifically, the vulnerability can be exploited if a storage zone was created by one of these product versions: 5.9.0, 5.8.0, 5.7.0, 5.6.0, 5.5.0, or earlier. This CVE differs from CVE-2020-8982 and CVE-2020-8983 but has essentially the same risk.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Sharefile Storagezones Controller | <= 5.5.0 |
Related Weaknesses (CWE)
References
- https://support.citrix.com/article/CTX269106Vendor Advisory
- https://support.citrix.com/article/CTX269106Vendor Advisory
FAQ
What is CVE-2020-7473?
CVE-2020-7473 is a vulnerability with a CVSS score of 7.5 (HIGH). In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access...
How severe is CVE-2020-7473?
CVE-2020-7473 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7473?
Check the references section above for vendor advisories and patch information. Affected products include: Citrix Sharefile Storagezones Controller.