description: Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access.
problem types: CWE-668 Exposure of Resource to Wrong Sphere
affected:
{
defaultStatus: unaffected
product: Zoom for Windows Client
vendor: Zoom Video Communications, Inc.
versions:
status: affected, version: before  5.14.10
}
{
defaultStatus: unaffected
product: Zoom for MacOS Client
vendor: Zoom Video Communications, Inc.
versions:
status: affected, version: before 5.14.10
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL