CVE-2024-24698

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

History

04 Oct 2024, 15:54

Type Values Removed Values Added
CPE cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*
cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : 4.9
v2 : unknown
v3 : 4.4
References () https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/ - () https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/ - Vendor Advisory
First Time Zoom zoom
Zoom meeting Software Development Kit
Zoom
Zoom vdi Windows Meeting Clients
Zoom rooms

27 Sep 2024, 20:15

Type Values Removed Values Added
Summary
  • (es) La autenticación inadecuada en algunos clientes de Zoom puede permitir que un usuario privilegiado realice una divulgación de información a través del acceso local.
Summary (en) Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. (en) Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
CWE CWE-287 CWE-449

14 Feb 2024, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-14 00:15

Updated : 2024-10-04 15:54


NVD link : CVE-2024-24698

Mitre link : CVE-2024-24698

CVE.ORG link : CVE-2024-24698


JSON object : View

Products Affected

zoom

  • rooms
  • zoom
  • vdi_windows_meeting_clients
  • meeting_software_development_kit
CWE
NVD-CWE-noinfo CWE-449

The UI Performs the Wrong Action