CVE-2023-43585: 
NixOS vulnerability analysis and mitigation

Improper access control vulnerability (CVE-2023-43585) was discovered in Zoom Mobile App for iOS and Zoom SDKs for iOS versions before 5.16.5. The vulnerability was disclosed on December 13, 2023, and allows authenticated users to potentially access unauthorized information through network access (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.1 (High severity) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L. The vulnerability affects multiple Zoom products including the Zoom Mobile App for iOS and Zoom SDKs for iOS prior to version 5.16.5 (Zoom Advisory).

When exploited, this vulnerability could allow authenticated users to conduct unauthorized disclosure of information through network access. The high CVSS score indicates significant potential impact on data confidentiality (Cybersecurity News).

The vulnerability requires network access and authenticated user status to exploit. The attack complexity is rated as low, indicating relatively straightforward exploitation methods once authentication is achieved (NVD).

Users are advised to update to Zoom Mobile App for iOS version 5.16.5 or later, and ensure all Zoom SDKs for iOS are updated to version 5.16.5 or later. The fix is available through the official Zoom download page (Zoom Advisory).