CVE-2023-34114

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-34114
Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://explore.zoom.us/en/trust/security/security-bulletin/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
History

21 Jun 2023, 21:02

Type Values Removed Values Added
First Time Zoom zoom
Zoom
References (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
CWE CWE-668

13 Jun 2023, 21:27

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-13 19:15

Updated : 2023-12-10 15:01

NVD link : CVE-2023-34114

Mitre link : CVE-2023-34114

CVE.ORG link : CVE-2023-34114

JSON object : View

Products Affected

zoom

  • zoom
CWE
CWE-668

Exposure of Resource to Wrong Sphere