PT-2018-14900 · Primx · Primx Zonecentral

Published 2018-11-14 · Updated 2019-10-03 · CVE-2018-19279

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRIMX ZoneCentral versions prior to 6.1.2236

Description The issue sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater.

Recommendations For versions prior to 6.1.2236, update to version 6.1.2236 or later to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2018-19279

Affected Products

Primx Zonecentral

References · 3

• https://primx.eu/en/security-18a10338 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19279 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19279 · Vendor Advisory