2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Zoom Workplace Apps for Windows","vendor":"Zoom Communications, Inc","versions":[{"status":"affected","version":"see references","versionType":"custom"}]}],"source":"security@zoom.us"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:zoom:meeting_software_development_kit:*:*:*:*:*:windows:*:*","matchCriteriaId":"A98C293E-D615-4807-B5D6-D3EACF6C2E5A","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*","matchCriteriaId":"5369DF52-B7F8-45BF-B431-747DFA54CF1E","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:rooms_controller:*:*:*:*:*:windows:*:*","matchCriteriaId":"F57C8F45-FAE2-486D-83F4-0E938B62CBDB","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:video_software_development_kit:*:*:*:*:*:windows:*:*","matchCriteriaId":"1126B8E5-38A9-4E00-9103-6C4EFDE6D60C","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:workplace_desktop:*:*:*:*:*:windows:*:*","matchCriteriaId":"6FC0F189-0F60-4EAB-9C35-0A62F06BFAC4","versionEndExcluding":"6.2.5","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*","matchCriteriaId":"645FDC99-C05E-4819-AA55-F9A80A98F567","versionEndExcluding":"6.0.15","vulnerable":true},{"criteria":"cpe:2.3:a:zoom:workplace_virtual_desktop_infrastructure:*:*:*:*:*:windows:*:*","matchCriteriaId":"9E06D46C-AE61-4533-A8F7-6E6CA9830155","versionEndExcluding":"6.1.13","versionStartIncluding":"6.0.16","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access."},{"lang":"es","value":"La ruta de búsqueda no confiable en el instalador de algunas aplicaciones de Zoom Workplace para Windows puede permitir que un usuario autorizado realice una escalada de privilegios a través del acceso local."}],"id":"CVE-2025-0145","lastModified":"2026-06-17T08:25:58.120","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.6,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":1.5,"impactScore":2.7,"source":"security@zoom.us","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0145","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-30T21:23:14.886270Z","version":"2.0.3"}}]},"published":"2025-01-30T20:15:34.547","references":[{"source":"security@zoom.us","tags":["Vendor Advisory"],"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-25004/"}],"sourceIdentifier":"security@zoom.us","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-426"}],"source":"security@zoom.us","type":"Secondary"}]}
|