Insecure File Handling in Zoom Rooms for Windows by Zoom
CVE-2023-34119

8.2HIGH

Key Information:

Vendor
Zoom Video Communications, Inc.
Status
Zoom Rooms For Windows
Vendor
CVE Published:
11 July 2023

Summary

The installer for Zoom Rooms for Windows prior to version 5.15.0 contains an insecure temporary file issue that allows authenticated users to exploit local access. This vulnerability enables an escalation of privileges, potentially compromising system security. Maintaining updated software is essential to mitigate risks associated with this type of vulnerability.

Affected Version(s)

Zoom Rooms for Windows before 5.15.0

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.