Security Advisory

CVE-2021-34408

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-27 13:55:35
Last updated 2024-08-04 00:12:50
Assigner Zoom
CVSS score not scored
State PUBLISHED

Description

The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a link was created between the user writable directory used and a non-user writable directory.