PT-2023-6505 · Zoom · Zoom Vdi Client For Windows

Published 2023-08-08 · Updated 2023-08-15 · CVE-2023-39210

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoom Client SDK for Windows versions prior to 5.15.0

Description The issue concerns the cleartext storage of sensitive information, which may allow an authenticated user to enable an information disclosure via local access. This could potentially permit an attacker to access protected information.

Recommendations For Zoom Client SDK for Windows versions prior to 5.15.0, update to version 5.15.0 or later to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2023-07252

CVE-2023-39210

Affected Products

Zoom Vdi Client For Windows

References · 6

• https://bdu.fstec.ru/vul/2023-07252 · Security Note
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39210 · Security Note
• https://t.me/cvenotify/56093 · Telegram Post
• https://t.me/cvenotify/56038 · Telegram Post