CVE-2024-39822

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.zoom.com/en/trust/security-bulletin/zsb-24029	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zoom:meeting_software_development_kit::::::android::*
	cpe:2.3:a:zoom:meeting_software_development_kit::::::iphone_os::*
	cpe:2.3:a:zoom:rooms::::::ipados::*
	cpe:2.3:a:zoom:rooms::::::macos::*
	cpe:2.3:a:zoom:rooms::::::windows::*
	cpe:2.3:a:zoom:rooms_controller::::::android::*
	cpe:2.3:a:zoom:rooms_controller::::::linux::*
	cpe:2.3:a:zoom:rooms_controller::::::macos::*
	cpe:2.3:a:zoom:rooms_controller::::::windows::*
	cpe:2.3:a:zoom:workplace::::::android::*
	cpe:2.3:a:zoom:workplace::::::iphone_os::*
	cpe:2.3:a:zoom:workplace_desktop::::::linux::*

History

04 Sep 2024, 21:28

Type	Values Removed	Values Added
References	~~() https://www.zoom.com/en/trust/security-bulletin/zsb-24029 -~~	() https://www.zoom.com/en/trust/security-bulletin/zsb-24029 - Vendor Advisory
CPE		cpe:2.3:a:zoom:rooms::::::windows::* cpe:2.3:a:zoom:rooms_controller::::::android::* cpe:2.3:a:zoom:rooms_controller::::::linux::* cpe:2.3:a:zoom:rooms::::::ipados::* cpe:2.3:a:zoom:meeting_software_development_kit::::::iphone_os::* cpe:2.3:a:zoom:workplace::::::iphone_os::* cpe:2.3:a:zoom:workplace_desktop::::::linux::* cpe:2.3:a:zoom:meeting_software_development_kit::::::android::* cpe:2.3:a:zoom:workplace::::::android::* cpe:2.3:a:zoom:rooms_controller::::::windows::* cpe:2.3:a:zoom:rooms::::::macos::* cpe:2.3:a:zoom:rooms_controller::::::macos::*
Summary		(es) La divulgación de información confidencial en algunas aplicaciones, SDK, clientes de salas y controladores de salas de Zoom Workplace puede permitir que un usuario privilegiado realice una divulgación de información a través del acceso a la red.
CWE		NVD-CWE-noinfo
First Time		Zoom Zoom rooms Zoom meeting Software Development Kit Zoom workplace Desktop Zoom rooms Controller Zoom workplace

14 Aug 2024, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-14 17:15

Updated : 2024-09-04 21:28

NVD link : CVE-2024-39822

Mitre link : CVE-2024-39822

CVE.ORG link : CVE-2024-39822

JSON object : View

Products Affected

zoom

workplace
meeting_software_development_kit
workplace_desktop
rooms_controller
rooms

CWE

NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2024-39822", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "security@zoom.us", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-08-14T17:15:15.207", "references": [{"url": "https://www.zoom.com/en/trust/security-bulletin/zsb-24029", "tags": ["Vendor Advisory"], "source": "security@zoom.us"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "security@zoom.us", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access."}, {"lang": "es", "value": " La divulgaci\u00f3n de informaci\u00f3n confidencial en algunas aplicaciones, SDK, clientes de salas y controladores de salas de Zoom Workplace puede permitir que un usuario privilegiado realice una divulgaci\u00f3n de informaci\u00f3n a trav\u00e9s del acceso a la red."}], "lastModified": "2024-09-04T21:28:37.727", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "3317B66C-1FBB-4F9C-BC87-8AE4A18D96EE", "versionEndExcluding": "6.0.12"}, {"criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "D300722C-BFDD-45B5-AA62-4ADE987B1B08", "versionEndExcluding": "6.0.12"}, {"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:ipados:*:*", "vulnerable": true, "matchCriteriaId": "9A8F4501-FF62-4C1B-9232-875D6B09B509", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "30C8F150-F275-423E-818C-B15B929FA006", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "242D5F39-22FC-4304-8F36-3A0A23BDCC6E", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "603C3411-C4F4-4451-BA4B-C463EC11C707", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "A1D900AF-A23B-4D1C-BDE3-CE99DFFBDEBB", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "B497C5C3-921E-462B-91A3-58DA2F669236", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "D40263F3-4A0E-418E-AF91-8AD20A957D9F", "versionEndExcluding": "6.1.0"}, {"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "DDDA5ACF-B421-451F-997B-3A11CA39EAD8", "versionEndExcluding": "6.0.12"}, {"criteria": "cpe:2.3:a:zoom:workplace:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "F607299C-CA29-49AE-98E6-E26DF095D649", "versionEndExcluding": "6.0.12"}, {"criteria": "cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "E6290901-6547-4AAF-89D2-D95A8AF8FA4F", "versionEndExcluding": "6.0.12"}], "operator": "OR"}]}], "sourceIdentifier": "security@zoom.us"}

6.5 /10