CVE-2024-39826CWE-367

Zoom Workplace Apps and SDKs - Path traversal

Medium · published July 15, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2024-07-15T17:24Z
EPSS history
Timeline
  • 15 JUL 17:24Z
    Zoom Workplace Apps and SDKs - Path traversal
    cvelistv5