Privileged User May Access Information via Local Access
CVE-2024-24698

4.4MEDIUM

Key Information:

Vendor: Zoom
Status: Vdi Windows Meeting Clients; Zoom; Meeting Software Development Kit; Rooms
Vendor: CVE Published:; 14 February 2024

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

Score:

4.4

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged