CISA Adds Citrix ShareFile Flaw to KEV Catalog #techshorts #technews

The U.S. government’s Cybersecurity and Infrastructure Security Agency has added a flaw in Citrix’s ShareFile storage controller to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active in-the-wild exploitation.

This vulnerability affects all currently supported versions of customer-managed Share File storage zones controller before version 5.11.24.

It’s worth noting that the first signs of exploitation of the vulnerability emerged toward the end of July 2023.

GreyNoise explains the severity of the problem in an announcement.

The Federal Civilian Executive Branch (FCEB) agencies have been mandated to apply vendor-provided fixes to remediate the vulnerability by September 6, 2023; however, most customers have had their systems patched by now.

#shorts #techshorts #technews #tech #technology #vulnerability #active in-the-wild exploitation #PKCS7 padding

👋 Feeling the vibes?

Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️

If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.

Your clicks = cosmic support for more awesome content! 🚀🌈