CVE Catalog
CVE-2023-39210
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
The Zoom Client SDK for Windows before version 5.15.0 has cleartext storage of sensitive information, which may allow an authenticated user to enable information disclosure via local access.
Risk Assessment
The organization may be exposed to sensitive data disclosure by authenticated users, potentially leading to privacy breaches and data security issues.
Recommendation
It is recommended to update the Zoom Client SDK to version 5.15.0 or later to mitigate the risk associated with the cleartext storage of sensitive information.
Original NVD description (English source)
Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via local access.