« Volver al listado

CVE-2024-24698

Estado: ModificadaMedia (4.4)—

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Zoom — Meeting Software Development KITZoom — RoomsZoom — VDI Windows Meeting ClientsZoom — Zoom

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-24698",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-24698",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-02-14T15:30:17.531210Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@zoom.us",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@zoom.us",
      "affectedData": [
        {
          "vendor": "Zoom Video Communications, Inc.",
          "product": "Zoom Clients",
          "versions": [
            {
              "status": "affected",
              "version": "see references"
            }
          ],
          "platforms": [
            "Windows",
            "iOS",
            "Linux",
            "Android"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-02-14T00:15:47.967",
  "references": [
    {
      "url": "https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@zoom.us"
    },
    {
      "url": "https://www.zoom.com/en/trust/security-bulletin/ZSB-24005/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@zoom.us",
      "description": [
        {
          "lang": "en",
          "value": "CWE-449"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access."
    },
    {
      "lang": "es",
      "value": "La autenticación inadecuada en algunos clientes de Zoom puede permitir que un usuario privilegiado realice una divulgación de información a través del acceso local."
    }
  ],
  "lastModified": "2026-06-17T07:14:42.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED921F3E-F076-4037-BAE9-53BDC04F2A4C",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D60A59A-2E09-48C6-82F6-995B7ADB330A",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C7B8981-66F8-4309-98C6-63B4665229EF",
              "versionEndExcluding": "5.15.5"
            },
            {
              "criteria": "cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDCC89D1-EB4D-496D-82C6-B0BBA942286F",
              "versionEndExcluding": "5.16.12",
              "versionStartExcluding": "5.15.15"
            },
            {
              "criteria": "cpe:2.3:a:zoom:vdi_windows_meeting_clients:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECD4FC8B-5FB2-4667-B92F-26F2A951EE40",
              "versionEndExcluding": "5.17.5",
              "versionStartExcluding": "5.16.12"
            },
            {
              "criteria": "cpe:2.3:a:zoom:zoom:*:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA20AF82-C1DF-4C05-91ED-F5DC1A92C0A3",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:zoom:*:*:*:*:*:iphone_os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5C425F2-9B12-4E3A-88CD-BD7AC0EEB0F6",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E7DB9AA-DB7D-4F3F-A7EA-A482F328F8AB",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:zoom:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E5232D6-0338-4FCC-AB49-39EA6B75B91D",
              "versionEndExcluding": "5.17.0"
            },
            {
              "criteria": "cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ED34AF6-F5F5-45A1-8AF1-C85064789454",
              "versionEndExcluding": "5.17.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@zoom.us"
}