PT-2023-12392 · Qlik · Qlik Nprinting Designer

Ronnie Salomonsen · Published 2023-01-26 · Updated 2025-04-01 · CVE-2021-41988

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qlik NPrinting Designer versions prior to 21.14.4.0

Description The issue arises from Qlik NPrinting Designer creating a temporary file in a directory with insecure permissions. This could potentially allow unauthorized access or modification of sensitive data.

Recommendations For versions prior to 21.14.4.0, update to version 21.14.4.0 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2021-41988

Affected Products

Qlik Nprinting Designer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-41988 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41988 · Vendor Advisory
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0002.md · Note
• https://t.me/cvenotify/117199 · Telegram Post