CVE-2023-50441

2023-12-1300:00:00

mitre

www.cve.org

encrypted folders

anssi qualification

zonecentral

windows

vulnerability

unc reference

outbound network traffic

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

21.9%

JSON

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which folders are opened.

References

www.primx.eu/en/bulletins/security-bulletin-23B3093A/

www.primx.eu/fr/blog/