CVE-2023-24489
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
Published Jul 10, 2023 · updated Jun 16, 2026 · citrix sharefile storage zones controller
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jul 10, 2023 · Catalog
Detected
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
Aug 16, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Sep 6, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Sep 6, 2023
Affected
- cpe citrix/sharefile storage zones controllerversion unspecified
- vendor Citrix Content Collaborationversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2023-24489
Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
cisa.gov - CVE.orgVulnerability recordCVE-2023-24489
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-24489
30-day exploitation probability 97.3%
first.org - NIST NVDVulnerability recordCVE-2023-24489
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.
nvd.nist.gov