CVE-2023-50444 | BDVDB-2026-219270 Detail

Description#

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.primx.eu/fr/blog/
https://www.primx.eu/en/bulletins/security-bulletin-23B30874/

Exploit#

No public exploit known

History#

Version 12023-12-13Record published in the CVE List.
Version 22024-11-26Most recent update recorded in the CVE List.