Lucene search

[email protected]CVE-2019-7312

HistoryOct 03, 2022 - 4:19 p.m.

CVE-2019-7312

2022-10-0316:19:30

CWE-200

[email protected]

web.nvd.nist.gov

cve-2019-7312

plaintext disclosure

primx zed enterprise

windows

mac

linux

security vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.

Affected configurations

NVD

Node

primxzedRange<1.0.195freewindows

primxzedRange<1.0.195prowindows

primxzedRange<1.0.199freelinux

primxzedRange<1.0.199freemac

primxzedRange<1.0.199prolinux

primxzedRange<1.0.199promac

primxzedRange<2.0.199entrepriselinux

primxzedRange<2.0.199entreprisemac

primxzedRange<6.1.2240entreprisewindows

primxzedmailRange<6.1.2240windows

primxzonecentralRange<6.1.2240windows

CPENameOperatorVersion
primx:zedprimx zedlt1.0.195
primx:zedprimx zedlt1.0.199
primx:zedprimx zedlt2.0.199
primx:zedprimx zedlt6.1.2240
primx:zedmailprimx zedmaillt6.1.2240
primx:zonecentralprimx zonecentrallt6.1.2240

CPE	Name	Operator	Version
primx:zed	primx zed	lt	1.0.195
primx:zed	primx zed	lt	1.0.199
primx:zed	primx zed	lt	2.0.199
primx:zed	primx zed	lt	6.1.2240
primx:zedmail	primx zedmail	lt	6.1.2240
primx:zonecentral	primx zonecentral	lt	6.1.2240

References

www.primx.eu/en/bulletins/security-bulletin-19110545

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Related for CVE-2019-7312

prion1 cvelist1 nvd1