Improper Access Control in Zoom for MacOS by Zoom
CVE-2023-28600

5.4MEDIUM

Key Information:

Vendor

Zoom Video Communications, Inc.
Status
Zoom For Mac OS Client
Vendor
CVE Published:
13 June 2023

What is CVE-2023-28600?

An improper access control vulnerability exists in Zoom for MacOS prior to version 5.14.0. This flaw could be exploited by a malicious user to delete or replace critical Zoom Client files, potentially compromising the integrity and availability of the software. Organizations using affected versions of Zoom are advised to upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Zoom for macOS Client before 5.14.0

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.