Skip to main content

The UI Performs the Wrong Action

CVE-2023-39209

Medium
5.9/10

Summary

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access.

  • HIGH
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • LOW

CWE-449 - The UI Performs the Wrong Action

The UI performs the wrong action with respect to the user's request.

References

Advisory Timeline

  • Published