CVE-2024-42435

Published: Aug 14, 2024Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access.

Affected (18)

Products: Zoom: Meeting Software Development Kit, Rooms, Rooms Controller, Workplace, Workplace Desktop, Workplace Virtual Desktop Infrastructure

Zoom

6 products

Meeting Software Development Kit

Workplace Virtual Desktop Infrastructure

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Zoom Meeting Software Development Kit	version < 6.1.0
Zoom Meeting Software Development Kit	version < 6.1.0
Zoom Meeting Software Development Kit	version < 6.1.0
Zoom Meeting Software Development Kit	version < 6.1.0
Zoom Rooms	version < 6.1.0
Zoom Rooms	version < 6.1.0
Zoom Rooms	version < 6.1.0
Zoom Rooms Controller	version < 6.1.0
Zoom Rooms Controller	version < 6.1.0
Zoom Rooms Controller	version < 6.1.0
Zoom Rooms Controller	version < 6.1.0
Zoom Workplace	version < 6.1.0
Zoom Workplace	version < 6.1.0
Zoom Workplace Desktop	version < 6.1.0
Zoom Workplace Desktop	version < 6.1.0
Zoom Workplace Desktop	version < 6.1.0
Zoom Workplace Virtual Desktop Infrastructure	version < 5.17.14
Zoom Workplace Virtual Desktop Infrastructure	6.0 ≤ version < 6.0.11

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://www.zoom.com/en/trust/security-bulletin/zsb-24030

Source: security@zoom.us

Vendor Advisory

Timeline

No history available yet.