PT-2023-24689 · Zoom · Zoom Rooms For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Windows versions prior to 5.15.0 Description: The issue is related to an insecure temporary file in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. Recommendations: Fo...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability previously existed in Zoom Rooms version 5.15.0, which stemmed from improper access control. It cou...

The vulnerability of Zoom video conferencing software, related to the disclosure of information in erroneous data fields, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to the exposure of information in the erroneous data area. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of Zoom’s video conferencing software lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Zoom’s video conferencing software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Zoom Client < 5.14.10 Information Disclosure Vulnerability (ZSB-23016) - Mac OS X

Zoom Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Zoom Client < 5.14.0 Access Control Vulnerability (ZSB-23008) - Mac OS X

Zoom Client is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Zoom Client < 5.14.10 Multiple Vulnerabilities (ZSB-23009, ZSB-23012 ZSB-23013, ZSB-23014, ZSB-23015, ZSB-23016) - Windows

Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

Zoom Client < 5.13.5 Cryptographic Signature Verification Vulnerability (ZSB-23010) - Windows

Zoom Client is prone to a cryptographic signature verification vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Zoom Client 5.15.0 Information Disclosure Vulnerability (ZSB-23025) - Mac OS X

Zoom Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Zoom Client < 5.13.10 HTML Injection Vulnerability (ZSB-23007) - Windows

Zoom Client is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescriptio...

Zoom Client 5.15.0 - 5.15.1 Information Disclosure Vulnerability (ZSB-23025) - Windows

Zoom Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Zoom Client < 5.13.10 Multiple Vulnerabilities (ZSB-23006, ZSB-23007) - Linux

Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...

Zoom Client 5.15.0 Information Disclosure Vulnerability (ZSB-23025) - Linux

Zoom Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...

CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...

Information disclosure

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...

CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...

CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...

CVE-2023-36539

CVE-2023-36539 — Zoom Client for Meetings information disclosure . The connected OpenVAS/Nessus entries confirm a vulnerability in Zoom Client for Meetings affecting Windows, macOS, and Linux, where unintended exposure of data “intended to be encrypted” could disclose sensitive information. Affec...

Zoom Client 加密问题漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client that stems from the exposure of information that is encrypted in the presence of encryption, which could lead to the disclosure of sensitive...