CVE-2024-24693CWE-379

Zoom Rooms Client for Windows - Improper Access Control

High · published March 13, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
7.3
In the wild
Unconfirmed
What it is

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.3th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2024-03-13T19:30Z
EPSS history
Timeline
  • 13 MAR 19:30Z
    Zoom Rooms Client for Windows - Improper Access Control
    cvelistv5