| Package | Affected versions | Patched versions |
|---|---|---|
| zed! | ≥ 2023.0, < 2023.5≥ q.2021.0, < q.2021.2< q.2020.3 | 2023.5q.2021.2q.2020.3 |
| zedmail | < 2023.5 | 2023.5 |
| zonecentral | ≥ 2023.0, < 2023.5< q.2021.2 | 2023.5q.2021.2 |
By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free