CVE-2025-30669
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-13
Last updated on: 2025-11-13
Assigner: Zoom Video Communications, Inc.
Description
Description
Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zoom | zoom_client | 3.1 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves improper certificate validation in certain Zoom Clients, which may allow an unauthenticated user to disclose information if they have adjacent access to the affected system.
How can this vulnerability impact me? :
The impact of this vulnerability is the potential disclosure of sensitive information to an unauthenticated attacker who has adjacent access, which could compromise confidentiality but does not affect integrity or availability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70