PT-2023-3756 · Zoom · Zoom

Published 2023-06-13 · Updated 2023-06-21 · CVE-2023-28602

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.13.5

Description The issue is related to an improper verification of cryptographic signature, which may allow a malicious user to downgrade Zoom Client components to previous versions.

Recommendations For versions prior to 5.13.5, update to version 5.13.5 or later to resolve the issue.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2023-04045

CVE-2023-28602

Affected Products

Zoom

References · 7

• https://bdu.fstec.ru/vul/2023-04045 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28602 · Security Note
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28602 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2023031504 · Note
• https://vuldb.com/?id.231454 · Note
• https://t.me/cvenotify/52835 · Telegram Post