Lucene search
HistoryDec 13, 2023 - 11:15 p.m.
CVE-2023-43585
zoom
ios
access control
disclosure
network access
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.3%
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.
Affected configurations
Node
zoommeeting_software_development_kitRange<5.16.0android
ORzoommeeting_software_development_kitRange<5.16.5iphone_os
ORzoomvideo_software_development_kitRange<5.16.5iphone_os
ORzoomzoomRange<5.16.5iphone_os
Related
cvelist
cvelist
CVE-2023-43585
2023-12-13 22:15:58
cve
cve
CVE-2023-43585
2023-12-13 23:15:07
prion
prion
Improper access control
2023-12-13 23:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.3%
Related for NVD:CVE-2023-43585