Design/Logic Flaw

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39214

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-39214

The CVE-2023-39214 entry concerns Zoom Client SDK before version 5.15.5, where an authenticated user may exploit a network-access vulnerability to cause a denial of service and potential exposure of sensitive information. Publicly documented details from OpenVAS listings corroborate the affected ...

CVE-2023-39210

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

CVE-2023-39210: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access...

PT-2023-6505

Name of the Vulnerable Software and Affected Versions Zoom Client SDK for Windows versions prior to 5.15.0 Description The issue concerns the cleartext storage of sensitive information, which may allow an authenticated user to enable an information disclosure via local access. This could...

PT-2023-5591 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.5 Description: The issue is related to insufficient protection of service data, which may allow a remote attacker to gain unauthorized access to protected information. It involves exposure of sensitive...

CVE-2023-39214: Exposed Dangerous Method or Function

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Summary: CVE-2023-34117 describes a relative path traversal in the Zoom Client SDK prior to 5.15.0, enabling an unauthorized local user to disclose information via local access. Affected software: Zoom Client SDK (pre-5.15.0). Root cause: relative path traversal in the SDK. Impact: information di...

CVE-2023-34117: Relative Path Traversal

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

PT-2023-24687 · Zoom · Zoom Client Sdk

Name of the Vulnerable Software and Affected Versions: Zoom Client SDK versions prior to 5.15.0 Description: The issue concerns a relative path traversal that may allow an unauthorized user to enable information disclosure via local access. Recommendations: For versions prior to 5.15.0, update to...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. A malicious attacker is able to provide falsified proof that will be accepted by the client SDK, signing a falsified transaction replacing the genuine one. This vulnerability only affects immudb client SDKs, the immudb server...

immudb data forgery problem vulnerability

Immudb is a database with built-in cryptographic proof and authentication. A data forgery issue vulnerability exists in codenotary immudb versions prior to 1.4.1, which stems from a client SDK that does not validate the UUID and can accept any value reported by the server, which can be exploited ...

CVE-2022-36111

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

CVE-2022-36111: Insufficient Verification of Data Authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

CVE-2022-36111 immundb has insufficient verification of data authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

CVE-2022-39199

immudb is a database with built-in cryptographic proof and verification. immudb client SDKs use server's UUID to distinguish between different server instance so that the client can connect to different immudb instances and keep the state for multiple servers. SDK does not validate this uuid and...