CVE-2024-24698

Published: Feb 14, 2024Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

Products: Zoom: Meeting Software Development Kit, Rooms, Vdi Windows Meeting Clients, Zoom

4 products

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	version < 5.17.0
Zoom Rooms	version < 5.17.0
Zoom Vdi Windows Meeting Clients	version < 5.15.5
Zoom Vdi Windows Meeting Clients	5.15.15 < version < 5.16.12
Zoom Vdi Windows Meeting Clients	5.16.12 < version < 5.17.5
Zoom Zoom	version < 5.17.0
Zoom Zoom	version < 5.17.0
Zoom Zoom	version < 5.17.0
Zoom Zoom	version < 5.17.0
Zoom Zoom	version < 5.17.0

Source: security@zoom.us

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.