Lucene search

ZoomCVELIST:CVE-2023-36539

HistoryJun 30, 2023 - 2:01 a.m.

CVE-2023-36539

2023-06-3002:01:21

Zoom

www.cve.org

zoom

clients

data

exposure

sensitive information

disclosure

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "See references link for ZSB-23025"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

Related for CVELIST:CVE-2023-36539