Information Disclosure Vulnerability in Zoom Workplace Apps
CVE-2024-45426

6.5MEDIUM

Key Information:

Vendor

Zoom Communications, Inc

Status
Zoom Workplace Apps
Vendor
CVE Published:
25 February 2025

What is CVE-2024-45426?

An incorrect ownership assignment in certain versions of Zoom Workplace Apps allows a privileged user to potentially disclose sensitive information via network access. This vulnerability highlights the importance of proper access control and ownership assignment to protect user data from unintended exposure.

Affected Version(s)

Zoom Workplace Apps Windows See references

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24038/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2024-45426 : Information Disclosure Vulnerability in Zoom Workplace Apps