7.1
CVE-2023-43585
- EPSS 0.13%
- Published 13.12.2023 23:15:07
- Last modified 21.11.2024 08:24:26
- Source security@zoom.us
- Teams watchlist Login
- Open Login
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.
Data is provided by the National Vulnerability Database (NVD)
Zoom ≫ Meeting Software Development Kit SwPlatformandroid Version < 5.16.0
Zoom ≫ Meeting Software Development Kit SwPlatformiphone_os Version < 5.16.5
Zoom ≫ Video Software Development Kit SwPlatformiphone_os Version < 5.16.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.331 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| security@zoom.us | 7.1 | 2.8 | 4.2 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
|
CWE-449 The UI Performs the Wrong Action
The UI performs the wrong action with respect to the user's request.