CVE-2023-36539

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*
cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*
cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*

History

18 Sep 2024, 19:15

Type Values Removed Values Added
CWE CWE-325
CWE-200
Summary (en) Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information. (en) Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

10 Jul 2023, 13:29

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CPE cpe:2.3:h:zoom:poly_ccx_700:-:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_mp54:-:*:*:*:*:*:*:*
cpe:2.3:o:zoom:yealink_mp54_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:meetings:5.15.1:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:linux:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:h:zoom:yealink_vp59:-:*:*:*:*:*:*:*
cpe:2.3:o:zoom:poly_ccx_600_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:iphone_os:*:*
cpe:2.3:a:zoom:video_software_development_kit:1.8.0:*:*:*:*:*:*:*
cpe:2.3:o:zoom:yealink_mp56_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:h:zoom:yealink_mp56:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:o:zoom:yealink_vp59_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:ipad_os:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:macos:*:*
cpe:2.3:a:zoom:rooms:5.15.0:*:*:*:*:windows:*:*
cpe:2.3:a:zoom:zoom:5.15.0:*:*:*:*:android:*:*
cpe:2.3:o:zoom:poly_ccx_700_firmware:5.15.0:*:*:*:*:*:*:*
cpe:2.3:a:zoom:meetings:5.15.0:*:*:*:*:android:*:*
cpe:2.3:h:zoom:poly_ccx_600:-:*:*:*:*:*:*:*
cpe:2.3:a:zoom:zoom:5.15.1:*:*:*:*:windows:*:*
First Time Zoom meetings
Zoom yealink Mp56 Firmware
Zoom poly Ccx 600 Firmware
Zoom poly Ccx 700 Firmware
Zoom yealink Mp54 Firmware
Zoom poly Ccx 700
Zoom yealink Vp59 Firmware
Zoom yealink Mp56
Zoom yealink Vp59
Zoom
Zoom zoom
Zoom rooms
Zoom poly Ccx 600
Zoom video Software Development Kit
Zoom yealink Mp54
CWE CWE-326
References (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory

30 Jun 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-06-30 03:15

Updated : 2024-09-18 19:15


NVD link : CVE-2023-36539

Mitre link : CVE-2023-36539

CVE.ORG link : CVE-2023-36539


JSON object : View

Products Affected

zoom

  • video_software_development_kit
  • yealink_mp56
  • zoom
  • meetings
  • yealink_mp56_firmware
  • rooms
  • poly_ccx_600_firmware
  • yealink_mp54_firmware
  • poly_ccx_700_firmware
  • yealink_mp54
  • yealink_vp59
  • poly_ccx_700
  • poly_ccx_600
  • yealink_vp59_firmware
CWE
CWE-326

Inadequate Encryption Strength

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-325

Missing Cryptographic Step