Lucene search
ZoomCVE-2024-39818HistoryAug 14, 2024 - 5:15 p.m.
CVE-2024-39818
2024-08-1417:15:14
CWE-522
Zoom
web.nvd.nist.gov
30
zoom
workplace apps
sdks
information disclosure
network access
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
18.9%
Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.
Affected configurations
Node
zoomroomsRange<6.0.0ipados
ORzoomroomsRange<6.0.0macos
ORzoomroomsRange<6.0.0windows
ORzoomworkplaceRange<6.0.0android
ORzoomworkplaceRange<6.0.0iphone_os
ORzoomworkplace_desktopRange<6.0.0linux
ORzoomworkplace_desktopRange<6.0.0macos
ORzoomworkplace_desktopRange<6.0.0windows
ORzoomworkplace_virtual_desktop_infrastructureRange<5.17.13windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:* |
| zoom | workplace_virtual_desktop_infrastructure | * | cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Windows",
"MacOS",
"Linux",
"iOS",
"Android"
],
"product": "Zoom Workplace Apps and SDKs",
"vendor": "Zoom Communications Inc.",
"versions": [
{
"status": "affected",
"version": "see references"
}
]
}
]Related
cvelist
cvelist
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
2024-08-14 16:36:37
nvd
nvd
CVE-2024-39818
2024-08-14 17:15:14
vulnrichment
vulnrichment
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
2024-08-14 16:36:37
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
18.9%
Related for CVE-2024-39818