Lucene search
HistorySep 12, 2023 - 8:15 p.m.
CVE-2023-39215
cve-2023-39215
improper authentication
zoom clients
denial of service
network access
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
Affected configurations
Node
zoommeeting_software_development_kitRange<5.15.5android
ORzoomvirtual_desktop_infrastructureRange<5.14.12
ORzoomvirtual_desktop_infrastructureRange5.15.0–5.15.4
ORzoomzoomRange<5.15.5android
ORzoomzoomRange<5.15.5iphone_os
ORzoomzoomRange<5.15.5linux
ORzoomzoomRange<5.15.5macos
ORzoomzoomRange<5.15.5windows
Related
cvelist
cvelist
CVE-2023-39215
2023-09-12 19:53:25
cve
cve
CVE-2023-39215
2023-09-12 20:15:09
prion
prion
Authentication flaw
2023-09-12 20:15:00
nessus
nessus
Zoom VDI Meeting Client < 5.15.4 Vulnerability (ZSB-23040)
2023-11-03 00:00:00
Zoom Client for Meetings < 5.15.5 Vulnerability (ZSB-23040)
2023-11-03 00:00:00
Zoom VDI Meeting Client < 5.14.12 Vulnerability (ZSB-23040)
2023-11-03 00:00:00
openvas
openvas
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.3%
Related for NVD:CVE-2023-39215