CVE-2023-39520 : What You Need to Know

Cryptomator encrypts data stored on cloud services. The vulnerability in version 1.9.2 allows local privilege escalation for low privileged users via the

repair

function. Version 1.9.3 addresses this issue.

Understanding CVE-2023-39520

Cryptomator vulnerability to Local Elevation of Privileges

What is CVE-2023-39520?

Cryptomator version 1.9.2 enables local privilege escalation for low privileged users through the

repair

function.

The Impact of CVE-2023-39520

The vulnerability allows attackers to escalate privileges locally, compromising the security of the Cryptomator application.

Technical Details of CVE-2023-39520

This section provides an overview of the vulnerability in Cryptomator version 1.9.2

Vulnerability Description

The MSI installer for Cryptomator version 1.9.2 permits local privilege escalation for low privileged users during the repair process.

Affected Systems and Versions

Cryptomator version 1.9.2 is affected by this security issue.

Exploitation Mechanism

The vulnerability arises from the repair function spawning a SYSTEM Powershell without the

-NoProfile

parameter, leading to user profile loading.

Mitigation and Prevention

Learn how to safeguard your system against the CVE-2023-39520 vulnerability

Immediate Steps to Take

Update to Cryptomator version 1.9.3 to mitigate the privilege escalation vulnerability.

Long-Term Security Practices

Regularly update your software and follow secure coding practices to prevent similar vulnerabilities in the future.

Patching and Updates

Download Cryptomator version 1.9.3 from the official website to apply the fix for CVE-2023-39520.