Medium WID-SEC-2023-3122 4 CVEs

Zoom Video Communications Zoom Client: Mehrere Schwachstellen

Published Dec 12, 2023 · Updated Dec 12, 2023 · de-DE

Vendor: Zoom Video Communications Product: Zoom Client < 5.16.5 Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zoom Video Communications Zoom Client ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder seine Rechte zu erweitern.

Product

Zoom bietet Kommunikationssoftware, die Videokonferenzen, Online-Besprechungen, Chat und mobile Zusammenarbeit kombiniert.

Vulnerabilities 4

High 7.3

CVE-2023-43586

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an …

Zoom Video Communications Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 Windows

Dec 13, 2023
High 7.1

CVE-2023-43585

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticat…

Zoom Video Communications Zoom Mobile App for iOS and SDKs for iOS iOS

Dec 13, 2023
Medium 6.4

CVE-2023-49646

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial …

Zoom Video Communications Zoom Clients

Dec 13, 2023
Medium 4.9

CVE-2023-43583

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before ver…

Zoom Video Communications Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDK Android iOS

Dec 13, 2023

Revision history

2023-12-12 #1
Initiale Fassung

References

Zoom Security Bulletins vom 2023-12-12
https://www.zoom.com/en/trust/security-bulletin/
Zoom Security Bulletins vom 2023-12-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-23056/
Zoom Security Bulletins vom 2023-12-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-23059/
Zoom Security Bulletins vom 2023-12-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-23058/
Zoom Security Bulletins vom 2023-12-12
https://www.zoom.com/en/trust/security-bulletin/ZSB-23062/