PT-2023-26992 · Unknown · Cryptomator

Pfiatde · Publicado 2023-08-07 · Atualizado 2025-04-10 · CVE-2023-39520

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cryptomator version 1.9.2

Description Cryptomator encrypts data being stored on cloud infrastructure. The issue allows local privilege escalation for low privileged users via the repair function. This occurs because the repair function of the MSI installer spawns a SYSTEM Powershell without the -NoProfile parameter, loading the profile of the user starting the repair.

Recommendations For Cryptomator version 1.9.2, update to version 1.9.3 to resolve the issue. As a temporary workaround, consider adding a -NoProfile parameter to the Powershell command to prevent the user's profile from being loaded during the repair process.

Exploit

Correção

LPE

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-39520

GHSA-62GX-54J7-MJH3

Produtos afetados

Cryptomator

Referências · 10

• 🔥 https://github.com/cryptomator/cryptomator/security/advisories/GHSA-62gx-54j7-mjh3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39520.json · Exploit
• https://github.com/cryptomator/cryptomator/releases/download/1.9.2/Cryptomator-1.9.2-x64.msi · Nota
• https://github.com/cryptomator/cryptomator/releases/tag/1.9.3 · Nota
• https://github.com/cryptomator/cryptomator/commit/727c32ad50c3901a6144a11cf984a3b7ebcf8b2b · Correção
• https://t.me/cvenotify/118772 · Publicação no Telegram
• https://t.me/cibsecurity/67925 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-39520 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-39520 · Aviso do Fabricante
• https://t.me/cvenotify/55956 · Publicação no Telegram