← Back

CVE-2019-7312

nvd nist
Published: Feb 3, 2019Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.

Affected (11)

Primx
3 products
Zed
Zedmail
Zonecentral
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Primx
Zed
Before 2.0.199
Zed
Before 2.0.199
Zed
Before 6.1.2240
Zed
Before 1.0.199
Zed
Before 1.0.199
Zed
Before 1.0.195
Zed
Before 1.0.199
Zed
Before 1.0.199
Zed
Before 1.0.195
Zedmail
Before 6.1.2240
Zonecentral
Before 6.1.2240

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.