VulnerabilityBleeping Computer
9.8 — CRITICAL
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown
Progress Software has confirmed that a high-severity zero-day vulnerability is behind the emergency shutdown of ShareFile Storage Zone Controllers last week and has released security updates to patch the flaw. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A high-severity zero-day path traversal vulnerability in Progress ShareFile Storage Zone Controller allowed an authenticated administrative user to read arbitrary files, write threat actor-controlled content, and enumerate the server filesystem layout.
⚙️Technical Details
Affected Systems
Progress ShareFile Storage Zone Controller
Attack Vectors
Authenticated administrative userPath traversal vulnerability
💥Impact Assessment
Severity: critical
Who Is at Risk
Customers using Progress ShareFile Storage Zone Controllers
🛡️Recommended Actions
1Immediately shut down Windows servers running ShareFile Storage Zone Controller
2Apply security updates to installed versions (5.12.5 and 6.0.2)
3Monitor for suspicious activity and report any incidents to Progress
📦Affected Products
Software:Progress ShareFile Storage Zone Controller
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.