Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

CVE-2023-43582 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2023-43582

CVE-2023-43582

MEDIUM5.5

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access

Published Nov 14, 2023

Modified 1 years ago

Fix available

Details

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

Affected Packages

Zoom Workplace

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Fixed in:

5.16.0

zoom.us

macOS 14macOS 15macOS 26

Fixed in:

5.16.0

References

WEB

https://explore.zoom.us/en/trust/security/security-bulletin/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-43582

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

5.5/CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness Type (CWE)

Other

CWE-939

Ecosystems(25)

Windows 10 (1507)Windows 10 (1607) / Server 2016 Windows 10 (1703)Windows 10 (1709)Windows 10 (1803)

Timeline

PublishedNov 14, 2023

ModifiedSep 19, 2024