CVE-2023-43585CWE-449

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of…

High · published December 13, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00599 · 48.0th percentile
Weakness
CWE-449 · The UI Performs the Wrong Action
Published
2023-12-13T22:15Z
EPSS history
Timeline
  • 13 DEC 22:15Z
    Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of…
    cvelistv5