Uncontrolled search path element in the installer for... · CVE-2024-39820 · GitHub Advisory Database · GitHub

Uncontrolled search path element in the installer for...

Moderate severity Unreviewed Published Jul 15, 2024 to the GitHub Advisory Database • Updated Jul 15, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access.

References

Published by the National Vulnerability Database

Jul 15, 2024

Published to the GitHub Advisory Database Jul 15, 2024

Last updated Jul 15, 2024

Severity

Moderate

6.6

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H