Vulnerability in Primx Zed\!
CVE-2023-50439
ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows before 2023.5 disclose the original path in which the containers were created, which allows an unauthenticated attacker to obtain some information regarding the context of use (project name, etc.).
EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Primx Zed\!
- Primx Zedmail
- Primx Zonecentral
- N/a — versions n/a
References
- cve@mitre.org (Product)
- cve@mitre.org (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-50439?
- CVE-2023-50439 is a medium-severity vulnerability in Primx Zed\!. CVSS score: 5.3/10. Published 2023-12-13.
- How severe is CVE-2023-50439?
- Medium severity. CVSS v3 base score is 5.3 out of 10.