Zoom Products Information Disclosure Vulnerabilities

Multiple vulnerabilities were identified in Zoom Products. A remote attacker could exploit these vulnerabilities to trigger sensitive information disclosure on the targeted system.

Impact

• Information Disclosure

System / Technologies affected

• Zoom Meeting SDK for Windows before version 6.5.5
• Zoom Rooms for Windows before version 6.5.1
• Zoom Rooms for macOS before version 6.5.1
• Zoom Rooms for Android before version 6.5.1
• Zoom Rooms for iOS before version 6.5.1
• Zoom Rooms for iPad before version 6.5.1
• Zoom Workplace for Windows before version 6.5.5
• Zoom Workplace VDI Client for Windows before version 6.3.15 and 6.4.13

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://www.zoom.com/en/trust/security-bulletin/zsb-25038/
• https://www.zoom.com/en/trust/security-bulletin/zsb-25039/

Source link