CVE-2024-42435
Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.
- Score
- CVSS 3.1 4.9 Medium
- Status
- Analyzed - security@zoom.us
- Published
- 2024-08-14
- Last modified
- 2024-08-15
- Weaknesses
- CWE-200
Affected products
- Meeting Software Development Kit (Zoom)
- Rooms (Zoom)
- Rooms Controller (Zoom)
- Workplace (Zoom)
- Workplace Desktop (Zoom)
- Workplace Virtual Desktop Infrastructure (Zoom)
- And Rooms Controllers (Zoom Communications Inc.)
- Rooms Clients (Zoom Communications Inc.)
- Sdks (Zoom Communications Inc.)
- Zoom Workplace Apps (Zoom Communications Inc.)
References
- https://www.zoom.com/en/trust/security-bulletin/zsb-24030
