CVE-2023-39214
CVE-2023-39214
In short
Zoom Client SDK versions before 5.15.5 contain a flaw that exposes sensitive information and can allow an authenticated user to crash or disrupt the service through network access.
Technical detail
CWE-749 vulnerability in Zoom Client SDK <5.15.5 permits authenticated attackers to trigger a denial of service condition via network-based attack vector, leveraging exposed sensitive information. Requires valid authentication credentials; impact includes service disruption.
Summary generated and translated by AI from the official description.
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Affected products
Zoom Video Communications, Inc. · Zoom SDK'sWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →