Lucene search

[email protected]CVE-2023-36539

HistoryJun 30, 2023 - 3:15 a.m.

CVE-2023-36539

2023-06-3003:15:09

CWE-326

[email protected]

web.nvd.nist.gov

cve-2023-36539

zoom

information security

encryption

data disclosure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

Affected configurations

NVD

Node

zoommeetingsMatch5.15.0android

zoommeetingsMatch5.15.0iphone_os

zoommeetingsMatch5.15.0macos

zoommeetingsMatch5.15.1windows

zoomroomsMatch5.15.0ipad_os

zoomroomsMatch5.15.0macos

zoomroomsMatch5.15.0windows

zoomvideo_software_development_kitMatch1.8.0

zoomzoomMatch5.15.0android

zoomzoomMatch5.15.0iphone_os

zoomzoomMatch5.15.0linux

zoomzoomMatch5.15.0macos

zoomzoomMatch5.15.0windows

zoomzoomMatch5.15.1windows

Node

zoompoly_ccx_700_firmwareMatch5.15.0

AND

zoompoly_ccx_700Match-

Node

zoompoly_ccx_600_firmwareMatch5.15.0

AND

zoompoly_ccx_600Match-

Node

zoomyealink_vp59_firmwareMatch5.15.0

AND

zoomyealink_vp59Match-

Node

zoomyealink_mp54Match-

AND

zoomyealink_mp54_firmwareMatch5.15.0

Node

zoomyealink_mp56Match-

AND

zoomyealink_mp56_firmwareMatch5.15.0

CPENameOperatorVersion
zoom:meetingszoom meetingseq5.15.0
zoom:meetingszoom meetingseq5.15.1
zoom:roomszoom roomseq5.15.0
zoom:video_software_development_kitzoom video software development kiteq1.8.0
zoom:zoomzoomeq5.15.0
zoom:zoomzoomeq5.15.1

CPE	Name	Operator	Version
zoom:meetings	zoom meetings	eq	5.15.0
zoom:meetings	zoom meetings	eq	5.15.1
zoom:rooms	zoom rooms	eq	5.15.0
zoom:video_software_development_kit	zoom video software development kit	eq	1.8.0
zoom:zoom	zoom	eq	5.15.0
zoom:zoom	zoom	eq	5.15.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "See references link for ZSB-23025"
      }
    ]
  }
]