CVE-2021-34408
Published: 27 September 2021
Summary
CVE-2021-34408 is a high-severity Link Following (CWE-59) vulnerability in Zoom Meetings. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 31.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-21066
Vulnerability details
The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation…
more
if a link was created between the user writable directory used and a non-user writable directory.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.