CVE-2023-43582

High

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

Zoom·CWE-939·Published 2023-11-14

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

130 chars

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

NVDen

130 chars

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

La autorización inadecuada en algunos clientes de Zoom puede permitir que un usuario autorizado realice una escalada de privilegios a través del acceso a la red.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	5.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	5.5	2.1	3.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L