← Back

CVE-2023-39215

nvd nist
Published: Sep 12, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Affected (8)

Zoom
3 products
Meeting Software Development Kit
Virtual Desktop Infrastructure
Zoom
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Meeting Software Development Kit
Before 5.15.5
Zoom
Virtual Desktop Infrastructure
Before 5.14.12
Virtual Desktop Infrastructure
From 5.15.0 to 5.15.4
Zoom
Zoom
Before 5.15.5
Zoom
Before 5.15.5
Zoom
Before 5.15.5
Zoom
Before 5.15.5
Zoom
Before 5.15.5

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-449
The UI Performs the Wrong Action
The UI performs the wrong action with respect to the user's request.

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.