Lucene search

[email protected]CVE-2023-39214

HistoryAug 08, 2023 - 10:15 p.m.

CVE-2023-39214

2023-08-0822:15:10

CWE-668

CWE-200

[email protected]

web.nvd.nist.gov

cve-2023-39214

zoom

client sdk

sensitive information

denial of service

network access

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

JSON

Exposure of sensitive information in Zoom Client SDK’s before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

Affected configurations

NVD

Node

zoommeeting_software_development_kitRange<5.15.5linux

zoommeeting_software_development_kitRange<5.15.5macos

zoommeeting_software_development_kitRange<5.15.5windows

zoomroomsRange<5.15.5android

zoomroomsRange<5.15.5ipad_os

zoomroomsRange<5.15.5macos

zoomroomsRange<5.15.5windows

zoomzoomRange<5.15.5android

zoomzoomRange<5.15.5iphone_os

zoomzoomRange<5.15.5linux

zoomzoomRange<5.15.5macos

zoomzoomRange<5.15.5windows

CPENameOperatorVersion
zoom:meeting_software_development_kitzoom meeting software development kitlt5.15.5
zoom:roomszoom roomslt5.15.5
zoom:zoomzoomlt5.15.5

CPE	Name	Operator	Version
zoom:meeting_software_development_kit	zoom meeting software development kit	lt	5.15.5
zoom:rooms	zoom rooms	lt	5.15.5
zoom:zoom	zoom	lt	5.15.5

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom SDK's",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.15.5"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7.7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

JSON

Related for CVE-2023-39214

cvelist1 nvd1 prion1 openvas3