PT-2019-18522 · Apple+3 · Mac+11

Published 2019-02-03 · Updated 2019-02-26 · CVE-2019-7312

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRIMX Zed Entreprise for Windows versions prior to 6.1.2240 PRIMX Zed Entreprise for Windows (ANSSI qualification submission) versions prior to 6.1.2150 PRIMX Zed Entreprise for Mac versions prior to 2.0.199 PRIMX Zed Entreprise for Linux versions prior to 2.0.199 PRIMX Zed Pro for Windows versions prior to 1.0.195 PRIMX Zed Pro for Mac versions prior to 1.0.199 PRIMX Zed Pro for Linux versions prior to 1.0.199 PRIMX Zed Free for Windows versions prior to 1.0.195 PRIMX Zed Free for Mac versions prior to 1.0.199 PRIMX Zed Free for Linux versions prior to 1.0.199

Description A limited plaintext disclosure issue exists, where analyzing a Zed container can lead to the disclosure of plaintext content of very small files stored in it.

Recommendations For PRIMX Zed Entreprise for Windows versions prior to 6.1.2240, update to version 6.1.2240 or later. For PRIMX Zed Entreprise for Windows (ANSSI qualification submission) versions prior to 6.1.2150, update to version 6.1.2150 or later. For PRIMX Zed Entreprise for Mac versions prior to 2.0.199, update to version 2.0.199 or later. For PRIMX Zed Entreprise for Linux versions prior to 2.0.199, update to version 2.0.199 or later. For PRIMX Zed Pro for Windows versions prior to 1.0.195, update to version 1.0.195 or later. For PRIMX Zed Pro for Mac versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Pro for Linux versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Free for Windows versions prior to 1.0.195, update to version 1.0.195 or later. For PRIMX Zed Free for Mac versions prior to 1.0.199, update to version 1.0.199 or later. For PRIMX Zed Free for Linux versions prior to 1.0.199, update to version 1.0.199 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2019-7312

Affected Products

Linux

Mac

Primx Zed Entreprise For Linux

Primx Zed Entreprise For Mac

Primx Zed Entreprise For Windows

Primx Zed Free For Linux

Primx Zed Free For Mac

Primx Zed Free For Windows

Primx Zed Pro For Linux

Primx Zed Pro For Mac

Primx Zed Pro For Windows

Windows

References · 3

• https://osv.dev/vulnerability/CVE-2019-7312 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7312 · Security Note
• https://primx.eu/en/bulletins/security-bulletin-19110545 · Note