CVE-2024-39818

Published: Aug 14, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Affected (9)

Products: Zoom: Rooms, Workplace, Workplace Desktop, Workplace Virtual Desktop Infrastructure

4 products

Workplace Virtual Desktop Infrastructure

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Zoom Rooms	Before 6.0.0
Zoom Rooms	Before 6.0.0
Zoom Rooms	Before 6.0.0
Zoom Workplace	Before 6.0.0
Zoom Workplace	Before 6.0.0
Zoom Workplace Desktop	Before 6.0.0
Zoom Workplace Desktop	Before 6.0.0
Zoom Workplace Desktop	Before 6.0.0
Zoom Workplace Virtual Desktop Infrastructure	Before 5.17.13

Related CWEs

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-24022

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.