Zoom Workplace Apps and SDKs - Path traversal

  • ZSB-24023
  • CVE-2024-39826
  • Medium
  • 6.8
  • CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

Path traversal in Zoom Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access.  

 

Users can help keep themselves secure by applying the latest updates available at https://zoom.us/download.

  • Zoom Workplace Desktop App for Windows before version 6.0.0
  • Zoom Workplace VDI App for Windows before version 5.17.13
  • Zoom Meeting SDK for Windows before version 6.0.0

Reported by shmoul.

Revision Date Description
1.0 07/09/2024

Initial publication.