CVE-2023-43582CWE-939

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access

Medium · published November 14, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00660 · 50.9th percentile
Weakness
CWE-939 · Improper Authorization in Handler for Custom URL Scheme
Published
2023-11-14T23:12Z
EPSS history
Timeline
  • 14 NOV 23:12Z
    Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access
    cvelistv5