CVE-2019-7312

Name: CVE-2019-7312
Creator: NVD / NIST
Published: 2019-02-03T08:29:00.293+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.10%

Last modified Jun 17, 2026

CVE-2019-7312 is a vulnerability of currently unknown severity. Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.. EPSS estimates a 1.10% chance of exploitation in the next 30 days.

Description

Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows before 6.1.2240, Zed Entreprise for Windows (ANSSI qualification submission) before 6.1.2150, Zed Entreprise for Mac before 2.0.199, Zed Entreprise for Linux before 2.0.199, Zed Pro for Windows before 1.0.195, Zed Pro for Mac before 1.0.199, Zed Pro for Linux before 1.0.199, Zed Free for Windows before 1.0.195, Zed Free for Mac before 1.0.199, and Zed Free for Linux before 1.0.199. Analyzing a Zed container can lead to the disclosure of plaintext content of very small files (a few bytes) stored into it.

Metrics

EPSS Probability

1.10%

61.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Primx	Zed	< 1.0.195
Primx	Zed	< 1.0.199
Primx	Zed	< 2.0.199
Primx	Zed	< 6.1.2240
Primx	Zedmail	< 6.1.2240
Primx	Zonecentral	< 6.1.2240

References

https://www.primx.eu/en/bulletins/security-bulletin-19110545Third Party Advisory
https://www.primx.eu/en/bulletins/security-bulletin-19110545Third Party Advisory

Timeline

Published: Feb 3, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-7312?

How severe is CVE-2019-7312?

Severity scoring for CVE-2019-7312 is pending analysis. The EPSS model estimates a 1.10% probability of exploitation in the next 30 days.

How do I fix CVE-2019-7312?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-7312?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST