Lucene search

ZoomCVE-2024-39822

HistoryAug 14, 2024 - 5:15 p.m.

CVE-2024-39822

2024-08-1417:15:15

CWE-200

Zoom

web.nvd.nist.gov

zoom

information exposure

network access

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

18.8%

JSON

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

Affected configurations

Nvd

Node

zoommeeting_software_development_kitRange<6.0.12android

zoommeeting_software_development_kitRange<6.0.12iphone_os

zoomroomsRange<6.1.0ipados

zoomroomsRange<6.1.0macos

zoomroomsRange<6.1.0windows

zoomrooms_controllerRange<6.1.0android

zoomrooms_controllerRange<6.1.0linux

zoomrooms_controllerRange<6.1.0macos

zoomrooms_controllerRange<6.1.0windows

zoomworkplaceRange<6.0.12android

zoomworkplaceRange<6.0.12iphone_os

zoomworkplace_desktopRange<6.0.12linux

VendorProductVersionCPE
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*
zoomworkplace*cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::android::*
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::iphone_os::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::ipados::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::macos::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::windows::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::android::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::linux::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::macos::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::windows::*
zoom	workplace	*	cpe:2.3:a:zoom:workplace::::::android::*

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "iOS",
      "Android"
    ],
    "product": "Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers",
    "vendor": "Zoom Communications Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "see references"
      }
    ]
  }
]

References

www.zoom.com/en/trust/security-bulletin/zsb-24029

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

18.8%

JSON

Related for CVE-2024-39822