DeutschShown in its original language — a full translation is planned for a future version.
Zoom Video Communications Zoom Client: Mehrere Schwachstellen
view advisory published 2023-12-12
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder seine Rechte zu erweitern.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-49646US | medium6.5 | — | ||
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2023-43586US | high8.8 | — | ||
Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via… | ||||
| CVE-2023-43585US | medium6.5 | — | ||
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network ac… | ||||
| CVE-2023-43583US | medium4.9OT elevated | — | ||
Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allow a privileged user to conduct a disclosu… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2023-3122 - CSAF Versionself
- WID-SEC-2023-3122 - Portal Versionself
- Zoom Security Bulletins vom 2023-12-12external
- Zoom Security Bulletins vom 2023-12-12external
- Zoom Security Bulletins vom 2023-12-12external
- Zoom Security Bulletins vom 2023-12-12external
- Zoom Security Bulletins vom 2023-12-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan