New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2023-39218

NVDCIRCLENISA

EUVD-2023-42952 · Published Aug 8, 2023

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.

Technologies

Zoom ZoomZoom RoomsZoom Virtual Desktop Infrastructure

Weaknesses

NVD-CWE-OtherCWE-602

CVSS scores

  • v3.14.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access Privilege Escalation Stealth Credential Access Collection

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot