CVE-2023-39214CWE-749

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access

High · published August 8, 2023

CVSS v3.1
7.6
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00960 · 61.2th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2023-08-08T21:38Z
EPSS history
Timeline
  • 08 AUG 21:38Z
    Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access
    cvelistv5