CVE-2023-43588

2023-11-1500:15:08

CWE-449

[email protected]

web.nvd.nist.gov

zoom clients

information disclosure

network access

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

18.1%

JSON

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

Affected configurations

Nvd

Node

zoommeetingsRange<5.16.0iphone_os

zoommeetingsRange<5.16.0linux

zoommeetingsRange<5.16.0windows

zoomvirtual_desktop_infrastructureRange<5.14.13

zoomvirtual_desktop_infrastructureRange5.15.0–5.15.11

zoomzoomRange<5.16.0linux

zoomzoomRange<5.16.0macos

zoomzoomRange<5.16.0windows

VendorProductVersionCPE
zoommeetings*cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:*
zoommeetings*cpe:2.3:a:zoom:meetings:*:*:*:*:*:linux:*:*
zoommeetings*cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:*
zoomvirtual_desktop_infrastructure*cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
zoomzoom*cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
zoom	meetings	*	cpe:2.3:a:zoom:meetings::::::iphone_os::*
zoom	meetings	*	cpe:2.3:a:zoom:meetings::::::linux::*
zoom	meetings	*	cpe:2.3:a:zoom:meetings::::::windows::*
zoom	virtual_desktop_infrastructure	*	cpe:2.3:a:zoom:virtual_desktop_infrastructure::::::::
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::linux::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::macos::*
zoom	zoom	*	cpe:2.3:a:zoom:zoom::::::windows::*