Lucene search

[email protected]NVD:CVE-2023-50444

HistoryDec 13, 2023 - 8:15 p.m.

CVE-2023-50444

2023-12-1320:15:49

CWE-307

[email protected]

web.nvd.nist.gov

primx zed! containers

zedmail

unencrypted sensitive information

unauthenticated access

brute force

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

39.8%

JSON

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.

Affected configurations

Nvd

Node

primxzed\!Range<q.2020.3enterprisewindows

primxzed\!Range2023.0–2023.5enterprisewindows

primxzed\!Rangeq.2021.0–q.2021.2enterprisewindows

primxzedmailRange<2023.5windows

primxzonecentralRange<q.2021.2windows

primxzonecentralRange2023.0–2023.5windows

VendorProductVersionCPE
primxzed\!*cpe:2.3:a:primx:zed\!:*:*:*:*:enterprise:windows:*:*
primxzedmail*cpe:2.3:a:primx:zedmail:*:*:*:*:*:windows:*:*
primxzonecentral*cpe:2.3:a:primx:zonecentral:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
primx	zed\!	*	cpe:2.3:a:primx:zed\!:::::enterprise:windows::
primx	zedmail	*	cpe:2.3:a:primx:zedmail::::::windows::*
primx	zonecentral	*	cpe:2.3:a:primx:zonecentral::::::windows::*

References

www.primx.eu/en/bulletins/security-bulletin-23B30874/

www.primx.eu/fr/blog/

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

39.8%

JSON

Related for NVD:CVE-2023-50444

prion1 cve1 cvelist1