CVE-2024-24699: Zoom Clients - Business Logic Error
Published Feb 13, 2024
·Updated
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
Affected Software
19 affected components
Zoom Meeting SDK<5.16.5
Zoom Rooms<5.17.0
Zoom Vdi Windows Meeting Clients Windows<5.15.15
Zoom Vdi Windows Meeting Clients Windows>5.15.15<5.16.10
Zoom Vdi Windows Meeting Clients Windows>5.16.10<5.17.5
Zoom Zoom Android<5.16.5
Zoom Zoom Iphone Os<5.16.5
Zoom Zoom Linux<5.16.5
Zoom Zoom Macos<5.16.5
Zoom Zoom Windows<5.16.5
Zoom Zoom Desktop Client=before version 5.16.5
Zoom Zoom VDI client=before version 5.16.10 (excluding 5.14.14 and 5.15.12)
Zoom Zoom Rooms Client=before version 5.17.0
Zoom Zoom Meeting SDK=before version 5.16.5
Zoom Zoom desktop apps
Zoom Zoom mobile apps
Zoom Zoom VDI client
Zoom Zoom Rooms Client
Zoom Zoom Meeting SDKs
Event History
Feb 13, 2024
CVE Published
via MITRE·11:58 PM
Data Sourced
via MITRE·11:58 PM
DescriptionSeverityWeakness
Feb 14, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityAffected Software
Feb 15, 2024
News Published
via The Register·03:30 PM
News Published
via The Register·03:33 PM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2024-24699?
CVE-2024-24699 is classified as a business logic error that can lead to information disclosure.
2
How do I fix CVE-2024-24699?
To fix CVE-2024-24699, users should update their Zoom clients to versions 5.16.5 or newer.
3
Which versions of Zoom are affected by CVE-2024-24699?
CVE-2024-24699 affects Zoom Desktop Client before version 5.16.5, Zoom VDI Client before version 5.16.10, and Zoom Rooms Client before version 5.17.0.
4
Is CVE-2024-24699 remote exploitable?
CVE-2024-24699 requires an authenticated user to exploit the vulnerability, thus it's not remotely exploitable.
5
What types of information can be disclosed due to CVE-2024-24699?
CVE-2024-24699 may allow an authenticated user to access sensitive information through network access.