CVE-2023-50444

Published: Dec 13, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.

Affected (6)

Products: Primx: Zed!, Zedmail, Zonecentral

3 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Primx Zed!	Before q.2020.3
Primx Zed!	From 2023.0 to 2023.5
Primx Zed!	From q.2021.0 to q.2021.2
Primx Zedmail	Before 2023.5
Primx Zonecentral	Before q.2021.2
Primx Zonecentral	From 2023.0 to 2023.5