Lucene search

[email protected]NVD:CVE-2023-36535

HistoryAug 08, 2023 - 6:15 p.m.

CVE-2023-36535

2023-08-0818:15:14

CWE-449

[email protected]

web.nvd.nist.gov

zoom

client-side enforcement

server-side security

information disclosure

authenticated user

network access

cve-2023-36535

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

28.3%

JSON

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.

Affected configurations

Nvd

Node

zoomroomsRange<5.14.10android

zoomroomsRange<5.14.10ipad_os

zoomroomsRange<5.14.10macos

zoomroomsRange<5.14.10windows

zoomvirtual_desktop_infrastructureRange<5.14.10

zoomzoomRange<5.14.10android

zoomzoomRange<5.14.10iphone_os

zoomzoomRange<5.14.10linux

zoomzoomRange<5.14.10macos

zoomzoomRange<5.14.10windows

VendorProductVersionCPE
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipad_os:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*
zoomrooms*cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
zoomvirtual_desktop_infrastructure*cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::android::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::ipad_os::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::macos::*
zoom	rooms	*	cpe:2.3:a:zoom:rooms::::::windows::*
zoom	virtual_desktop_infrastructure	*	cpe:2.3:a:zoom:virtual_desktop_infrastructure::::::::
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::android::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::iphone_os::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::linux::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::macos::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::windows::*