CVE-2020-10858: Medium severity zulip Zulip Desktop vulnerability
Published Feb 5, 2021
·Updated
Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler.
Affected Software
1 affected component
zulip Zulip Desktop<5.0.0
Event History
Feb 5, 2021
CVE Published
via MITRE·07:14 PM
Data Sourced
via MITRE·07:14 PM
Description
Frequently Asked Questions
1
What is CVE-2020-10858?
CVE-2020-10858 is a vulnerability in Zulip Desktop before version 5.0.0 that allows attackers to perform recording via the webcam and microphone without permission.
2
How severe is CVE-2020-10858?
CVE-2020-10858 has a severity rating of 5.3, which is considered medium severity.
3
What is the affected software for CVE-2020-10858?
The affected software for CVE-2020-10858 is Zulip Desktop versions up to (exclusive) 5.0.0.
4
How can the CVE-2020-10858 vulnerability be fixed?
To fix the CVE-2020-10858 vulnerability, users should update Zulip Desktop to version 5.0.0 or later.
5
Where can I find more information about CVE-2020-10858?
More information about CVE-2020-10858 can be found at the following link: [https://blog.zulip.com/2020/04/01/zulip-desktop-5-0-0-security-release/]