Medium severity5.9NVD Advisory· Published May 13, 2019· Updated Jun 17, 2026
CVE-2019-7218
CVE-2019-7218
Description
Citrix ShareFile before 19.23 allows a downgrade from two-factor authentication to one-factor authentication. An attacker with access to the offline victim's otp physical token or virtual app (like google authenticator) is able to bypass the first authentication phase (username/password mechanism) and log-in using username/otp combination only (phase 2 of 2FA).
Affected products
3cpe:2.3:a:citrix:sharefile:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:citrix:sharefile:*:*:*:*:*:*:*:*range: <=19.1
- (no CPE)range: <19.23
- Citrix/ShareFiledescription
Patches
Vulnerability mechanics
References
1- www.sk-it.com/en/cve.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.