CVE-2023-43588CWE-449

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access

Low · published November 14, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00654 · 50.7th percentile
Weakness
CWE-449 · The UI Performs the Wrong Action
Published
2023-11-14T23:11Z
EPSS history
Timeline
  • 14 NOV 23:11Z
    Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access
    cvelistv5