PT-2023-31550 · Primx · Primx Zonecentral

Published 2023-12-13 · Updated 2023-12-20 · CVE-2023-50442

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PRIMX ZONECENTRAL versions through 2023.5

Description Encrypted folders created by PRIMX ZONECENTRAL can be modified by a local attacker with appropriate privileges to temporarily exclude specific file types from encryption. This modification can be detected as described in the Administrator Guide.

Recommendations For PRIMX ZONECENTRAL versions through 2023.5, consider monitoring for modifications to encrypted folders and reviewing the Administrator Guide for detection methods. As a temporary workaround, ensure that local attackers do not have the necessary privileges to modify encrypted folders. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-50442

Affected Products

Primx Zonecentral

References · 6

• https://osv.dev/vulnerability/CVE-2023-50442 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50442 · Security Note
• https://primx.eu/en/bulletins/security-bulletin-23B30933 · Vendor Advisory
• https://primx.eu/fr/blog · Note
• https://twitter.com/VulmonFeeds/status/1735084564798652627 · Twitter Post
• https://twitter.com/CVEnew/status/1735040000796811691 · Twitter Post