CVEvulnerability

CVE-2025-30662

6.5 MEDIUM Published 2025-11-13 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2025-11-13
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-646

Description

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.4.14, and 6.5.10 in their respective tracks may allow an authenticated user to conduct a disclosure of information via network access.

Affected configurations

• zoom workplace virtual desktop infrastructure (< 6.3.14) • zoom workplace virtual desktop infrastructure (>= 6.4.0 < 6.4.14) • zoom workplace virtual desktop infrastructure (>= 6.5.0 < 6.5.10)

Related

Weakness · CWE (1)

  • CWE-646 Reliance on File Name or Extension of Externally-Supplied File weakness

References