CVE-2022-28758: Zoom Video Communications Inc Zoom On-Premise Meeting

Описание

Оригинално описание

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.

Засегнати продукти

• Zoom Video Communications Inc Zoom On-Premise Meeting Connector MMR: unspecified преди 4.8.20220815.130

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Zoom Video Communications Inc Zoom On-Premise Meeting Connector MMR

• 6.5CVE-2022-28761
• 8.2CVE-2022-28759
• 6.5CVE-2022-28760
• 7.1CVE-2022-28753
• 7.1CVE-2022-28754

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-28758
• https://nvd.nist.gov/vuln/detail/CVE-2022-28758
• https://explore.zoom.us/en/trust/security/security-bulletin/