Vulnerabilities

TI-2023-27590 CVE-2023-50444 · GHSA-rf58-mqx7-7rwr

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI…

MEDIUM 40

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00608 Published 2023-12-13 No fix listed CWE-307

TI-2023-27588 CVE-2023-50442 · GHSA-x9c6-vmcf-qhxr

Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local…

LOW 24

Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that specific file types are excluded from encryption temporarily.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00127 Published 2023-12-13 No fix listed

TI-2023-27587 CVE-2023-50441 · GHSA-m435-qj7x-7hx7

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI…

LOW 24

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC referen…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00241 Published 2023-12-13 No fix listed

TI-2023-27586 CVE-2023-50440 · GHSA-6959-gv2v-mf33

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification…

LOW 24

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualif…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00226 Published 2023-12-13 No fix listed CWE-284

TI-2023-27585 CVE-2023-50439 · GHSA-6mjq-x7m9-8gg4

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification…

LOW 25

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualif…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00522 Published 2023-12-13 No fix listed

TI-2019-05200 CVE-2019-7312 · GHSA-f542-9xxv-p6fm

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240…

LOW 26

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01103 Published 2019-02-03 No fix listed CWE-200

TI-2018-13669 CVE-2018-19279 · GHSA-8446-vv9c-4233

PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files.

LOW 19

PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files.

CVSS 3.0MEDIUM 4.3 Physical Low privileges No interaction EPSS 0.00212 Published 2018-11-14 No fix listed CWE-312

Vulnerabilities

Filters

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI…

Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local…

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI…

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification…

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification…

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240…

PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files.