CVE-2023-43582

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meetings:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:meetings:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:meetings:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipad_os:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

History

19 Sep 2024, 14:15

Type Values Removed Values Added
CWE CWE-939
Summary (en) Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access. (en) Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

21 Nov 2023, 00:45

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-15 00:15

Updated : 2024-09-19 14:15


NVD link : CVE-2023-43582

Mitre link : CVE-2023-43582

CVE.ORG link : CVE-2023-43582


JSON object : View

Products Affected

zoom

  • rooms
  • virtual_desktop_infrastructure
  • zoom
  • meetings
CWE
CWE-287

Improper Authentication

CWE-939

Improper Authorization in Handler for Custom URL Scheme