{"id":"CVE-2023-34114","state":"PUBLISHED","title":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. ","publishedAt":"2023-06-13T18:37:22.969Z","updatedAt":"2025-01-02T19:57:07.764Z","severity":{"score":7.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","source":"Zoom"},"assigner":"Zoom","products":["Zoom Video Communications, Inc. Zoom for Windows Client","Zoom Video Communications, Inc. Zoom for MacOS Client"],"affected":[{"vendor":"Zoom Video Communications, Inc.","product":"Zoom for Windows Client","defaultStatus":"unaffected","versions":[{"version":"before  5.14.10","status":"affected"}]},{"vendor":"Zoom Video Communications, Inc.","product":"Zoom for MacOS Client","defaultStatus":"unaffected","versions":[{"version":"before 5.14.10","status":"affected"}]}],"references":["https://explore.zoom.us/en/trust/security/security-bulletin/"],"weaknesses":["CWE-668"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/34xxx/CVE-2023-34114.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-34114","state":"PUBLISHED","datePublished":"2023-06-13T18:37:22.969Z","dateUpdated":"2025-01-02T19:57:07.764Z","assignerShortName":"Zoom","assignerOrgId":"99b9af0d-a833-4a5d-9e2f-8b1324f35351","dateReserved":"2023-05-25T22:01:29.097Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. "}],"affected":[{"vendor":"Zoom Video Communications, Inc.","product":"Zoom for Windows Client","defaultStatus":"unaffected","versions":[{"version":"before  5.14.10","status":"affected"}]},{"vendor":"Zoom Video Communications, Inc.","product":"Zoom for MacOS Client","defaultStatus":"unaffected","versions":[{"version":"before 5.14.10","status":"affected"}]}],"references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-668","description":"CWE-668 Exposure of Resource to Wrong Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Zoom","orgId":"99b9af0d-a833-4a5d-9e2f-8b1324f35351","dateUpdated":"2023-06-13T18:50:16.847Z"},"datePublic":"2023-06-13T16:00:00.000Z","impacts":[{"capecId":"CAPEC-131","descriptions":[{"lang":"en","value":"CAPEC-131: Resource Leak Exposure"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T16:01:54.230Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-02T19:56:43.010150Z","id":"CVE-2023-34114","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-02T19:57:07.764Z"}}]}}}