CVE Catalog
CVE-2023-39218
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk0.93%
56th percentile - higher than 56% of all known CVEs
Summary
In Zoom clients before version 5.14.10, there is a client-side enforcement issue of server-side security that may allow a privileged user to enable information disclosure via network access.
Risk Assessment
The organization may be exposed to the risk of confidential information disclosure by privileged users, potentially leading to serious security breaches.
Recommendation
It is recommended to update Zoom clients to version 5.14.10 or later to mitigate the risk of information disclosure.
Original NVD description (English source)
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.