CVE-2024-27244

EPSS 0.1%
Veröffentlicht 15.05.2024 21:15:08
Zuletzt bearbeitet 21.08.2025 16:20:43
Erkennungen
Login

Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in the installer for Zoom Workplace  VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatform windows Version < 5.15.0

Zoom ≫ Workplace Virtual Desktop Infrastructure SwPlatform windows Version >= 5.16.0 < 5.17.10

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.011

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@zoom.us	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://www.zoom.com/en/trust/security-bulletin/zsb-24015/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-27244

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-27244

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-27244

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-27244