Lucene search

ZoomCVE-2024-42434

HistoryAug 14, 2024 - 5:15 p.m.

CVE-2024-42434

2024-08-1417:15:16

CWE-200

Zoom

web.nvd.nist.gov

zoom workplace

information disclosure

network access

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

18.8%

JSON

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Affected configurations

Nvd

Node

zoommeeting_software_development_kitRange<6.1.0android

zoommeeting_software_development_kitRange<6.1.0iphone_os

zoommeeting_software_development_kitRange<6.1.0macos

zoommeeting_software_development_kitRange<6.1.0windows

zoomroomsRange<6.1.0ipados

zoomroomsRange<6.1.0macos

zoomroomsRange<6.1.0windows

zoomrooms_controllerRange<6.1.0android

zoomrooms_controllerRange<6.1.0linux

zoomrooms_controllerRange<6.1.0macos

zoomrooms_controllerRange<6.1.0windows

zoomworkplaceRange<6.1.0android

zoomworkplaceRange<6.1.0iphone_os

zoomworkplace_desktopRange<6.1.0linux

zoomworkplace_desktopRange<6.1.0macos

zoomworkplace_desktopRange<6.1.0windows

zoomworkplace_virtual_desktop_infrastructureRange<5.17.14windows

zoomworkplace_virtual_desktop_infrastructureRange6.0–6.0.11windows

VendorProductVersionCPE
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:macos:*:*
zoommeeting_software_development_kit*cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*
zoomrooms_controller*cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*

Vendor	Product	Version	CPE
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::android::*
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::iphone_os::*
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::macos::*
zoom	meeting_software_development_kit	*	cpe:2.3:a:zoom:meeting_software_development_kit::::::windows::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::ipados::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::macos::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::windows::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::android::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::linux::*
zoom	rooms_controller	*	cpe:2.3:a:zoom:rooms_controller::::::macos::*

Rows per page:

1-10 of 171

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "iOS",
      "Android"
    ],
    "product": "Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers",
    "vendor": "Zoom Communications Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "see references"
      }
    ]
  }
]

References

www.zoom.com/en/trust/security-bulletin/zsb-24030

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

18.8%

JSON

Related for CVE-2024-42434