Zoom Workplace Apps and SDKs for Windows Vulnerable to Path Traversal Attacks
CVE-2024-39826

6.8MEDIUM

Key Information:

Vendor

Zoom Communications, Inc

Status
Zoom Workplace Apps And Sdks
Vendor
CVE Published:
15 July 2024

What is CVE-2024-39826?

Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.

Affected Version(s)

Zoom Workplace Apps and SDKs Windows see references

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24023

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

JSON
.
CVE-2024-39826 : Zoom Workplace Apps and SDKs for Windows Vulnerable to Path Traversal Attacks