Lucene search

ZoomCVELIST:CVE-2023-39215

HistorySep 12, 2023 - 7:53 p.m.

CVE-2023-39215

2023-09-1219:53:25

CWE-287

Zoom

www.cve.org

zoom client

authentication

vulnerability

denial of service

network access

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Zoom Clients",
    "vendor": "Zoom Video Communications, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": " see reference"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

Related for CVELIST:CVE-2023-39215