Lucene search
HistoryAug 14, 2024 - 5:15 p.m.
CVE-2024-39818
zoom
workplace apps
sdks
information disclosure
network access
authentication
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
18.9%
Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.
Affected configurations
Node
zoomroomsRange<6.0.0ipados
ORzoomroomsRange<6.0.0macos
ORzoomroomsRange<6.0.0windows
ORzoomworkplaceRange<6.0.0android
ORzoomworkplaceRange<6.0.0iphone_os
ORzoomworkplace_desktopRange<6.0.0linux
ORzoomworkplace_desktopRange<6.0.0macos
ORzoomworkplace_desktopRange<6.0.0windows
ORzoomworkplace_virtual_desktop_infrastructureRange<5.17.13windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:* |
| zoom | rooms | * | cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:* |
| zoom | workplace | * | cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:macos:*:* |
| zoom | workplace_desktop | * | cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:* |
| zoom | workplace_virtual_desktop_infrastructure | * | cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:* |
Related
cvelist
cvelist
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
2024-08-14 16:36:37
vulnrichment
vulnrichment
CVE-2024-39818 Zoom Workplace Apps and SDKs - Protection Mechanism Failure
2024-08-14 16:36:37
cve
cve
CVE-2024-39818
2024-08-14 17:15:14
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
18.9%
Related for NVD:CVE-2024-39818