PT-2025-7908 · Zoom · Zoom Workplace Apps

Published 2024-10-08 · Updated 2025-02-25 · CVE-2024-45425

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps (affected versions not specified)

Description The issue is related to incorrect user management in some Zoom Workplace Apps, which may allow a privileged user to conduct an information disclosure via network access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-286

Related Identifiers

BDU:2025-02650

CVE-2024-45425

Affected Products

Zoom Workplace Apps

References · 7

• https://osv.dev/vulnerability/CVE-2024-45425 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02650 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-24037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45425 · Security Note
• https://zoom.com/en/trust/security-bulletin/zsb-24037/?cms_guid=false&lang=null · Note
• https://twitter.com/CVEnew/status/1894475084259271138 · Twitter Post
• https://zoom.com/en/trust/security-bulletin/zsb-24037/?cms_guid=false&lang=null · Note