Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.
References
| Link | Resource |
|---|---|
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
| https://explore.zoom.us/en/trust/security/security-bulletin/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:14
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.6 |
| References | () https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory |
27 Sep 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-176 | |
| Summary | (en) Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access. |
15 Aug 2023, 15:30
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-74 | |
| CPE | cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Zoom zoom
Zoom virtual Desktop Infrastructure Zoom |
|
| References | (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory |
08 Aug 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-08 22:15
Updated : 2024-11-21 08:14
NVD link : CVE-2023-39213
Mitre link : CVE-2023-39213
CVE.ORG link : CVE-2023-39213
JSON object : View
Products Affected
zoom
- virtual_desktop_infrastructure
- zoom