CVE-2023-39218

Published: Aug 8, 2023Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.

Affected (10)

Products: Zoom: Rooms, Virtual Desktop Infrastructure, Zoom

Zoom

3 products

Rooms

Virtual Desktop Infrastructure

Zoom

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zoom Rooms	Before 5.14.10
Zoom Rooms	Before 5.14.10
Zoom Rooms	Before 5.14.10
Zoom Rooms	Before 5.14.10
Zoom Virtual Desktop Infrastructure	Before 5.14.10
Zoom Zoom	Before 5.14.10
Zoom Zoom	Before 5.14.10
Zoom Zoom	Before 5.14.10
Zoom Zoom	Before 5.14.10
Zoom Zoom	Before 5.14.10

Related CWEs

CWE-602

Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

References (2)

https://explore.zoom.us/en/trust/security/security-bulletin/

Source: security@zoom.us

Vendor Advisory

https://explore.zoom.us/en/trust/security/security-bulletin/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.