Intrusion PreventionCitrix.ShareFile.SZC.ProcessRawPostedFile.Directory.Traversal
Description
This indicates an attack attempt to exploit a Directory Traversal Vulnerability in Citrix Systems ShareFile StorageZones Controller.
The vulnerability is due to improper validation of user input in the ProcessRawPostedFile function. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could allow an attacker to save files to an arbitrary file path under the web root directory, which could lead to the execution of arbitrary code.
Affected Products
Citrix Systems ShareFile StorageZones Controller prior to 5.11.24
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 53424 |
| Created | Jul 24, 2023 |
| Updated | Nov 15, 2023 |
| Threat Signal | View Report |
| Risk |
|
| CVE ID | CVE-2023-24489 |
| Known Exploited | Yes |
| Exploit Prediction Score | 97.42% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |