Lucene search

ZoomCVE-2024-27247

HistoryApr 09, 2024 - 6:15 p.m.

CVE-2024-27247

2024-04-0918:15:09

CWE-347

Zoom

web.nvd.nist.gov

zoom desktop client

macos

privilege management

installer

escalation of privilege

local access

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "MacOS"
    ],
    "product": "Zoom Desktop Client for macOS",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "before version 5.17.10"
      }
    ]
  }
]

References

www.zoom.com/en/trust/security-bulletin/zsb-24012/

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-27247