CVE-2023-43585

Published: Dec 13, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.

Affected (4)

Products: Zoom: Meeting Software Development Kit, Video Software Development Kit, Zoom

Zoom

3 products

Meeting Software Development Kit

Video Software Development Kit

Zoom

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	Before 5.16.0
Zoom Meeting Software Development Kit	Before 5.16.5
Zoom Video Software Development Kit	Before 5.16.5
Zoom Zoom	Before 5.16.5

Related CWEs

CWE-449

The UI Performs the Wrong Action

The UI performs the wrong action with respect to the user's request.

References (2)

https://www.zoom.com/en/trust/security-bulletin/ZSB-23058/

Source: security@zoom.us

Vendor Advisory

https://www.zoom.com/en/trust/security-bulletin/ZSB-23058/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.