CVE Vulnerabilities

CVE-2024-39818

Insufficiently Protected Credentials

Published: Aug 14, 2024 | Modified: Sep 11, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access.

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Rooms Zoom * 6.0.0 (excluding)
Workplace Zoom * 6.0.0 (excluding)
Workplace_desktop Zoom * 6.0.0 (excluding)
Workplace_virtual_desktop_infrastructure Zoom * 5.17.13 (excluding)

Potential Mitigations

References