VulnerabilityAnalyzed

CVE-2024-39818

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

MEDIUM 6.5EPSS 0.56%

Does this matter?

Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.

Description

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.56% probability · 45th percentile
CISA KEV: Not listed
Weakness: CWE-522
Affected: zoom/rooms · zoom/workplace · zoom/workplace desktop · zoom/workplace virtual desktop infrastructure
Source: security@zoom.us

References

https://www.zoom.com/en/trust/security-bulletin/zsb-24022Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.