CVE-2018-19279 Information disclosure in n/a

Medium 4.3 Published 14 Nov 2018 Updated 17 Sep 2024

PRIMX ZoneCentral on Windows may leak plaintext NTFS file contents, allowing attackers to read sensitive data from disk.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-19279?

CVE-2018-19279 is a medium-severity vulnerability in n/a, published on 14 Nov 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater.

Weakness: CWE-312

Which versions are affected by CVE-2018-19279?

It affects 1 product.

Products include Primx Zonecentral.

How do I fix CVE-2018-19279?

No fix has been published for CVE-2018-19279 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-19279 being exploited?

There is no known exploitation of CVE-2018-19279 in the wild and no public exploit code.

Sources

Also known as GHSA-8446-vv9c-4233.