Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.
References
| Link | Resource |
|---|---|
| https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Dec 2023, 02:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Zoom zoom
Zoom Zoom meeting Software Development Kit Zoom virtual Desktop Infrastructure Zoom video Software Development Kit |
|
| CPE | cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:* cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:* cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-287 | |
| References | () https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/ - Vendor Advisory |
13 Dec 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-13 23:15
Updated : 2024-09-20 15:15
NVD link : CVE-2023-49646
Mitre link : CVE-2023-49646
JSON object : View
Products Affected
zoom
- virtual_desktop_infrastructure
- zoom
- meeting_software_development_kit
- video_software_development_kit
CWE
CWE-287
Improper Authentication