Vulnerabilities > CVE-2023-34119 - Exposure of Resource to Wrong Sphere vulnerability in Zoom Rooms

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

zoom

CWE-668

NVD

Published: 2023-07-11

Updated: 2024-09-19

Summary

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

Vulnerable Configurations

Part	Description	Count
Application	Zoom Zoom Rooms - Zoom Rooms 4.6.5 Zoom Rooms 5.0.0 Zoom Rooms 5.0.2 Zoom Rooms 5.0.3 Zoom Rooms 5.0.4 Zoom Rooms 5.0.5 Zoom Rooms 5.1.0 Zoom Rooms 5.1.1 Zoom Rooms 5.1.2 Zoom Rooms 5.2.0 Zoom Rooms 5.2.1 Zoom Rooms 5.2.2 Zoom Rooms 5.3.0 Zoom Rooms 5.4.0 Zoom Rooms 5.4.3 Zoom Rooms 5.5.0 Zoom Rooms 5.5.1 Zoom Rooms 5.6.0 Zoom Rooms 5.6.3 Zoom Rooms 5.6.7 Zoom Rooms 5.7.0 Zoom Rooms 5.7.3 Zoom Rooms 5.7.5 Zoom Rooms 5.8.0 Zoom Rooms 5.11.0 Zoom Rooms 5.12.6 Zoom Rooms 5.12.7 Zoom Rooms 5.13.0 Zoom Rooms 5.13.3 Zoom Rooms 5.13.5 Zoom Rooms 5.14.0 Zoom Rooms 5.14.5 Zoom Rooms 5.14.10	34

Common Weakness Enumeration (CWE)

CWE-668 - Exposure of Resource to Wrong Sphere

References

https://explore.zoom.us/en/trust/security/security-bulletin/