CVE-2023-43585

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.

Score

CVSS 3.1 7.1 High

Status

Modified - security@zoom.us

Published

2023-12-13

Last modified

2024-09-27

Weaknesses

CWE-449

Affected products

• Meeting Software Development Kit (Zoom)
• Video Software Development Kit (Zoom)
• Zoom (Zoom)
• Zoom Mobile App For Ios And Sdks For Ios (Zoom Video Communications Inc.)

References

• https://www.zoom.com/en/trust/security-bulletin/ZSB-23058/