Progress Confirms: The Emergency ShareFile Shutdown Was Caused by a Zero-Day Vulnerability

Progress Software has officially confirmed that last week's emergency shutdown of ShareFile Storage Zone Controllers was caused by a high-severity zero-day vulnerability.

The company had previously decided to shut down the affected service components as an emergency measure without disclosing the exact reasons for what had happened. Progress Software has now reported that the action was taken in response to the discovery of a previously unknown vulnerability that could have been exploited by attackers.

Updates released

To fix the identified issue, the company has released security updates that close the vulnerability. Customers using ShareFile Storage Zone Controllers are advised to install the relevant patches.

ShareFile is Progress Software's cloud service for file sharing and document collaboration, used by organizations around the world. Storage Zone Controllers handle the storage and processing of customer data within an organization's own infrastructure or in dedicated cloud zones, which makes them a critically important element of the entire platform's security.

The company did not disclose details about the nature of the vulnerability, nor whether it had been used in real-world attacks before being patched.

Source: Bleeping Computer