CVE-2025-58133
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-10-15
Last updated on: 2025-10-21
Assigner: Zoom Video Communications, Inc.
Description
Description
Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zoom | rooms | to 6.5.1 (exc) |
| zoom | rooms | to 6.5.1 (exc) |
| zoom | rooms | to 6.5.1 (exc) |
| zoom | rooms | to 6.5.1 (exc) |
| zoom | rooms | to 6.5.1 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-288 | The product requires authentication, but the product has an alternate path or channel that does not require authentication. |