CVE-2023-39210

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Aug 8, 2023
Updated: Aug 15, 2023
CWE ID 312

Summary

CVE-2023-39210 is a cyber vulnerability that affects the Zoom Client SDK for Windows versions prior to 5.15.0. It involves the cleartext storage of sensitive information, which can potentially enable an information disclosure through local access by an authenticated user. The vulnerability has a base severity rating of MEDIUM and a base score of 5.5 according to NIST. The confidentiality impact is rated as HIGH, while the integrity impact is NONE. The exploitability score is 1.8, indicating a relatively low level of difficulty for an attacker to exploit the vulnerability. To remediate this vulnerability, organizations should update their Zoom Client SDK for Windows to version 5.15.0 or later to mitigate the risk of information disclosure and protect sensitive data from being compromised.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-39210 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options