CVE-2023-43583

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Dec 13, 2023
Updated: Dec 19, 2023
CWE ID 310

Summary

CVE-2023-43583 is a newly disclosed vulnerability affecting the Zoom Mobile App for Android and iOS, as well as the Zoom SDKs for these platforms. This issue pertains to cryptographic weaknesses that enable a privileged user to gain unauthorized access to sensitive information through network communication. Before version 5.16.0, these applications failed to adequately secure cryptographic keys and processes, potentially allowing an attacker to intercept and disclose confidential data. This vulnerability poses a significant risk and emphasizes the importance of keeping software up to date with the latest security patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Zoom Cloud Meetings

Affected Vendors

  • Zoom Video Communications, Inc