Lucene search

K
cve[email protected]CVE-2023-50439
HistoryDec 13, 2023 - 9:15 p.m.

CVE-2023-50439

2023-12-1321:15:09
web.nvd.nist.gov
8
cve-2023-50439
zed containers
primx zed!
anssi qualification
windows
security
vulnerability
nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows before 2023.5 disclose the original path in which the containers were created, which allows an unauthenticated attacker to obtain some information regarding the context of use (project name, etc.).

Affected configurations

NVD
Node
primxzed\!Range<q.2020.3enterprisewindows
OR
primxzed\!Range2023.02023.5enterprisewindows
OR
primxzed\!Rangeq.2021.0q.2021.2enterprisewindows
OR
primxzedmailRange<2023.5windows
OR
primxzonecentralRange<q.2021.2windows
OR
primxzonecentralRange2023.02023.5windows

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Related for CVE-2023-50439