PT-2019-18522 · Apple+3 · Mac+11

Publicado 2019-02-03 · Atualizado 2019-02-26 · CVE-2019-7312

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRIMX Zed Entreprise for Windows versions prior to 6.1.2240 PRIMX Zed Entreprise for Windows (ANSSI qualification submission) versions prior to 6.1.2150 PRIMX Zed Entreprise for Mac versions prior to 2.0.199 PRIMX Zed Entreprise for Linux versions prior to 2.0.199 PRIMX Zed Pro for Windows versions prior to 1.0.195 PRIMX Zed Pro for Mac versions prior to 1.0.199 PRIMX Zed Pro for Linux versions prior to 1.0.199 PRIMX Zed Free for Windows versions prior to 1.0.195 PRIMX Zed Free for Mac versions prior to 1.0.199 PRIMX Zed Free for Linux versions prior to 1.0.199

Description A limited plaintext disclosure issue exists, where analyzing a Zed container can lead to the disclosure of plaintext content of very small files stored in it.

Recommendations For PRIMX Zed Entreprise for Windows versions prior to 6.1.2240, update to version 6.1.2240 or later. For PRIMX Zed Entreprise for Windows (ANSSI qualification submission) versions prior to 6.1.2150, update to version 6.1.2150 or later. For PRIMX Zed Entreprise for Mac versions prior to 2.0.199, update to version 2.0.199 or later. For PRIMX Zed Entreprise for Linux versions prior to 2.0.199, update to version 2.0.199 or later. For PRIMX Zed Pro for Windows versions prior to 1.0.195, update to version 1.0.195 or later. For PRIMX Zed Pro for Mac versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Pro for Linux versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Free for Windows versions prior to 1.0.195, update to version 1.0.195 or later. For PRIMX Zed Free for Mac versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Free for Linux versions prior to 1.0.199, update to version 1.0.199 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-7312

Produtos afetados

Linux

Mac

Primx Zed Entreprise For Linux

Primx Zed Entreprise For Mac

Primx Zed Entreprise For Windows

Primx Zed Free For Linux

Primx Zed Free For Mac

Primx Zed Free For Windows

Primx Zed Pro For Linux

Primx Zed Pro For Mac

Primx Zed Pro For Windows

Windows

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-7312 · Aviso do Fabricante
• https://primx.eu/en/bulletins/security-bulletin-19110545 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-7312 · Nota de Segurança