CVE-2024-24698: 
NixOS vulnerability analysis and mitigation

CVE-2024-24698 is an improper authentication vulnerability affecting various Zoom client applications. The vulnerability was discovered by Zoom Offensive Security and disclosed on February 13, 2024. The issue affects multiple Zoom products including Desktop Clients for Windows, macOS, and Linux, VDI Client for Windows, Mobile Apps for Android and iOS, Zoom Rooms Client for Windows, and Zoom Meeting SDKs, all versions before 5.17.0 (Zoom Bulletin).

The vulnerability has been assigned a CVSS score of 4.9 (Medium severity) with a vector string of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires high privileges but can potentially lead to information disclosure through local access (NVD).

The vulnerability could allow a privileged user to conduct unauthorized disclosure of information through local access to affected Zoom client applications (Zoom Bulletin).

Users are advised to update their Zoom clients to version 5.17.0 or later to address this vulnerability. Updates are available through the official Zoom download page at https://zoom.us/download (Zoom Bulletin).