CVE-2023-36539CWE-200CWE-325

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information

Medium · published June 30, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 43.9th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-325 · Missing Cryptographic Step
Published
2023-06-30T02:01Z
EPSS history
Timeline
  • 30 JUN 02:01Z
    Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information
    cvelistv5