CVE-2024-39822

MEDIUM

Zoom Meeting SDK <6.0.12, Rooms <6.1.0, Rooms Controller <6.1.0, Workplace <6.0.12 - Sensitive Info Exposure

Title source: llm
STIX 2.1

Description

Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access.

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0062
EPSS Percentile 70.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (5)
zoom/meeting_software_development_kit < 6.0.12 (2 CPE variants)
zoom/rooms < 6.1.0 (3 CPE variants)
zoom/rooms_controller < 6.1.0 (4 CPE variants)
zoom/workplace < 6.0.12 (2 CPE variants)
zoom/workplace_desktop < 6.0.12
Published Aug 14, 2024
Tracked Since Feb 18, 2026