CVEvulnerability
CVE-2023-39520
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2023-08-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. The problem occurs as the repair function of the MSI is spawning an SYSTEM Powershell without the `-NoProfile` parameter. Therefore the profile of the user starting the repair will be loaded. Version 1.9.3 contains a fix for this issue. Adding a `-NoProfile` to the powershell is a possible workaround.
Affected configurations
• cryptomator cryptomator (< 1.9.3)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://github.com/cryptomator/cryptomator/commit/727c32ad50c3901a6144a11cf984a3b7ebcf8b2b Patch
- https://github.com/cryptomator/cryptomator/releases/download/1.9.2/Cryptomator-1.9.2-x64.msi Product
- https://github.com/cryptomator/cryptomator/releases/tag/1.9.3 Release Notes
- https://github.com/cryptomator/cryptomator/security/advisories/GHSA-62gx-54j7-mjh3 Exploit, Mitigation, Vendor Advisory
- https://github.com/cryptomator/cryptomator/commit/727c32ad50c3901a6144a11cf984a3b7ebcf8b2b Patch
- https://github.com/cryptomator/cryptomator/releases/download/1.9.2/Cryptomator-1.9.2-x64.msi Product
- https://github.com/cryptomator/cryptomator/releases/tag/1.9.3 Release Notes
- https://github.com/cryptomator/cryptomator/security/advisories/GHSA-62gx-54j7-mjh3 Exploit, Mitigation, Vendor Advisory