description: Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
problem types: CWE-426 Untrusted Search Path
affected:
{
defaultStatus: unaffected
platforms: Windows
product: Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows
vendor: Zoom Video Communications, Inc.
versions:
status: affected, version: See references
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL