Lucene search

K
cvelistZoomCVELIST:CVE-2023-43588
HistoryNov 14, 2023 - 11:11 p.m.

CVE-2023-43588

2023-11-1423:11:18
CWE-691
Zoom
www.cve.org
zoom
vulnerability
information disclosure
network access

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

7.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "iOS"
    ],
    "product": "Zoom Clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "see references"
      }
    ]
  }
]

3.5 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

7.3 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

Related for CVELIST:CVE-2023-43588