CVE-2023-3947CWE-321

Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure

Low · published July 26, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
32.9
In the wild
Unconfirmed
What it is

The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated attackers to decrypt and view the meeting id and password.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.9th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2023-07-26T03:34Z
EPSS history
Timeline
  • 26 JUL 03:34Z
    Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure
    cvelistv5