Orta CVSS 6.5
CVE-2025-30662: Workplace Virtual Desktop Infrastructure: güvenlik açığı
Açıklama (NVD)
Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.
Özet bilgiler
- Ürün
- Zoom Workplace Virtual Desktop Infrastructure
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - EPSS
- %0,14 (yüzdelik 3)
- CWE
- CWE-646
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| zoom-workplace-virtual-desktop-infrastructure | — | — | 6.3.14 |
| zoom-workplace-virtual-desktop-infrastructure | 6.4.0 | — | 6.4.14 |
| zoom-workplace-virtual-desktop-infrastructure | 6.5.0 | — | 6.5.10 |