ShareFile Storage Zones Controller vulnerabilities
6 known vulnerabilities in ShareFile Storage Zones Controller from Progress Software. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
ShareFile Storage Zones Controller: Improper Limitation of a Pathname to a Restricted Directory
In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to
- 7.2 High severity
In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an…
In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparat
- 8.0 High severity
ShareFile Storage Zones Controller: Deserialization of Untrusted Data
In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.
- 7.2 High severity
ShareFile Storage Zones Controller: Improper Limitation of a Pathname to a Restricted Directory
In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the applicati
- 8.7 High severity
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an…
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or dete
- 9.8 Critical severity
ShareFile Storage Zones Controller: Improper Access Control
Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages. This leads to changing system configuration and potential remote code execution.