Lucene search

K
nvd[email protected]NVD:CVE-2023-34114
HistoryJun 13, 2023 - 7:15 p.m.

CVE-2023-34114

2023-06-1319:15:09
CWE-668
web.nvd.nist.gov
3
zoom
windows
macos
information disclosure
network access
authenticated user

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

24.2%

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access.

Affected configurations

Nvd
Node
zoomzoomRange<5.14.10macos
OR
zoomzoomRange<5.14.10windows

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

24.2%

Related for NVD:CVE-2023-34114