Products
TeamViewer Full Client
- before 15.57
TeamViewer Meeting
- before 15.55.3
Source
psirt@teamviewer.com
Tags
CVE-2024-6053 details
Published : Aug. 28, 2024, 5:15 p.m.
Last Modified : Aug. 28, 2024, 5:15 p.m.
Last Modified : Aug. 28, 2024, 5:15 p.m.
Description
Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can lead to unintentional sharing of the clipboard with the current presenter of a meeting.
CVSS Score
| 1 | 2 | 3 | 4.3 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-359 | Exposure of Private Personal Information to an Unauthorized Actor | The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
Base Score
4.3
Exploitability Score
2.8
Impact Score
1.4
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
References
| URL | Source |
|---|---|
| https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1007/ | psirt@teamviewer.com |
This website uses the NVD API, but is not approved or certified by it.