Lucene search

ZoomCVELIST:CVE-2023-36539

HistoryJun 30, 2023 - 2:01 a.m.

CVE-2023-36539

2023-06-3002:01:21

CWE-325

CWE-200

Zoom

www.cve.org

zoom

clients

data

exposure

sensitive information

disclosure

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

43.4%

JSON

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "See references link for ZSB-23025"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

43.4%

JSON

Related for CVELIST:CVE-2023-36539