PT-2023-3427 · Zoom · Zoom Rooms For Windows+2
CVE-2023-34120
·
Publicado
2023-06-13
·
Atualizado
2024-09-19
CVSS v3.1
8.7
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Zoom for Windows versions prior to 5.14.0
Zoom Rooms for Windows versions prior to 5.14.0
Zoom VDI for Windows versions prior to 5.14.0
Description
The issue is related to improper privilege management, which may allow an authenticated user to potentially enable an escalation of privilege via local access. This could allow users to utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.
Recommendations
For Zoom for Windows versions prior to 5.14.0, update to version 5.14.0 or later to resolve the issue.
For Zoom Rooms for Windows versions prior to 5.14.0, update to version 5.14.0 or later to resolve the issue.
For Zoom VDI for Windows versions prior to 5.14.0, update to version 5.14.0 or later to resolve the issue.
Correção
Improper Verification of Cryptographic Signature
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Zoom Rooms For Windows
Zoom Vdi For Windows
Zoom For Windows