VULNERABILITY INTELLIGENCE

CVE-2019-7217

CVSS score7.5 HIGH
EPSS probability2.00%
CISA KEVNot currently listed
Published2019-05-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.

Weakness classification

  • CWE-203: Observable Discrepancy

Primary references