Main Vulnerability Database Vulnerabilities #VU77168

Exposure of Resource to Wrong Sphere in Zoom Workplace Desktop App for Windows - CVE-2023-34114

Published: June 12, 2023

Vulnerability identifier: #VU77168

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-34114

CWE-ID: CWE-668

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to improper access restrictions. A remote user can gain access to sensitive information.

Zoom Workplace Desktop App for Windows
Zoom Workplace Desktop App for macOS

Install updates from vendor's website.

Zoom Workplace Desktop App for Windows - update to 5.14.0 13888
Zoom Workplace Desktop App for macOS - update to 5.14.0 16775