Zoom Video Communications Zoom Client und Zoom On-Premise: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.7
  CVE-2023-34120

  Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14…

  Zoom Video Communications Zoom for Windows Client Zoom Rooms Client for Windows Zoom VDI for Windows Meeting Clients Windows
  Jun 13, 2023
• High 7.4
  CVE-2023-34114

  Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authent…

  Zoom Video Communications Zoom for Windows Client Zoom for macOS Client Windows macOS
  Jun 13, 2023
• Medium 4.1
  CVE-2023-34121

  Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow…

  Zoom Video Communications ZoomZoom Video Communications Zoom Rooms Client for Windows Zoom for Windows Windows
  Jun 13, 2023
• Low 3.3
  CVE-2023-34117

  Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable informati…

  Zoom Video Communications Zoom Client SDK
  Jul 11, 2023
• Unscored —
  CVE-2023-34113 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36541.

  Jun 13, 2023
• Unscored —
  CVE-2023-34122 Rejected

  This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36540.

  Jun 13, 2023

Revision history

1. 2023-06-12 #1

   Initiale Fassung

References

• Zoom Security Advisory vom 2023-06-11
  https://explore.zoom.us/en/trust/security/security-bulletin/