PT-2023-26992 · Unknown · Cryptomator

Pfiatde · Published 2023-08-07 · Updated 2025-04-10 · CVE-2023-39520

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cryptomator version 1.9.2

Description Cryptomator encrypts data being stored on cloud infrastructure. The issue allows local privilege escalation for low privileged users via the repair function. This occurs because the repair function of the MSI installer spawns a SYSTEM Powershell without the -NoProfile parameter, loading the profile of the user starting the repair.

Recommendations For Cryptomator version 1.9.2, update to version 1.9.3 to resolve the issue. As a temporary workaround, consider adding a -NoProfile parameter to the Powershell command to prevent the user's profile from being loaded during the repair process.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-39520

GHSA-62GX-54J7-MJH3

Affected Products

Cryptomator

References · 10

• 🔥 https://github.com/cryptomator/cryptomator/security/advisories/GHSA-62gx-54j7-mjh3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39520.json · Exploit
• https://github.com/cryptomator/cryptomator/commit/727c32ad50c3901a6144a11cf984a3b7ebcf8b2b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-39520 · Security Note
• https://osv.dev/vulnerability/CVE-2023-39520 · Vendor Advisory
• https://github.com/cryptomator/cryptomator/releases/download/1.9.2/Cryptomator-1.9.2-x64.msi · Note
• https://github.com/cryptomator/cryptomator/releases/tag/1.9.3 · Note
• https://t.me/cvenotify/118772 · Telegram Post
• https://t.me/cibsecurity/67925 · Telegram Post
• https://t.me/cvenotify/55956 · Telegram Post