PT-2023-2170 · Zoom · Zoom Client For It Admin

Published 2023-03-14 · Updated 2023-04-03 · CVE-2023-28596

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Client for IT Admin macOS installers versions prior to 5.13.5

Description The issue is related to a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to root. The vulnerability is also associated with an uncontrolled search path element.

Recommendations For versions prior to 5.13.5, update to version 5.13.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation process to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2023-01912

CVE-2023-28596

Affected Products

Zoom Client For It Admin

References · 8

• https://osv.dev/vulnerability/CVE-2023-28596 · Vendor Advisory
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28596 · Security Note
• https://bdu.fstec.ru/vul/2023-01912 · Security Note
• https://t.me/cvenotify/47424 · Telegram Post
• https://support.zoom.us/hc/en-us/articles/207373866-Zoom-Installers · Note
• https://github.com/advisories/GHSA-4hfv-g3hm-82x2 · Note
• https://t.me/cibsecurity/60836 · Telegram Post