Lucene search

[email protected]CVE-2023-43583

HistoryDec 13, 2023 - 11:15 p.m.

CVE-2023-43583

2023-12-1323:15:07

CWE-310

[email protected]

web.nvd.nist.gov

cve-2023-43583

cryptographic issue

zoom

mobile app

android

ios

sdk

disclosure of information

network access

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosure of information via network access.

Affected configurations

NVD

Node

zoommeeting_software_development_kitRange<5.16.0android

zoommeeting_software_development_kitRange<5.16.0iphone_os

zoomvideo_software_development_kitRange<5.16.0android

zoomvideo_software_development_kitRange<5.16.0iphone_os

zoomzoomRange<5.16.0android

zoomzoomRange<5.16.0iphone_os

CPENameOperatorVersion
zoom:meeting_software_development_kitzoom meeting software development kitlt5.16.0
zoom:video_software_development_kitzoom video software development kitlt5.16.0
zoom:zoomzoomlt5.16.0

CPE	Name	Operator	Version
zoom:meeting_software_development_kit	zoom meeting software development kit	lt	5.16.0
zoom:video_software_development_kit	zoom video software development kit	lt	5.16.0
zoom:zoom	zoom	lt	5.16.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Android",
      "iOS"
    ],
    "product": "Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDK",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.16.0"
      }
    ]
  }
]

References

www.zoom.com/en/trust/security-bulletin/ZSB-23056/

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Related for CVE-2023-43583

cvelist1 prion1 nvd1