description:  Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.
problem types: CWE-20 Improper Input Validation
affected:
{
defaultStatus: unaffected
product: Zoom for Windows
vendor: Zoom Video Communications, Inc.
versions:
status: affected, version: before 5.14.0
}
{
defaultStatus: unaffected
product: Zoom Rooms Client for Windows
vendor: Zoom Video Communications, Inc.
versions:
status: affected, version: before 5.14.0
}
{
defaultStatus: unaffected
product: Zoom VDI for Windows Meeting Clients
vendor: ZoomZoom Video Communications, Inc.
versions:
status: affected, version: before 5.14.0
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL