Lucene search

[email protected]CVE-2022-28761

HistoryOct 14, 2022 - 3:15 p.m.

CVE-2022-28761

2022-10-1415:15:16

CWE-284

[email protected]

web.nvd.nist.gov

zoom

on-premise

meeting connector

mmr

cve-2022-28761

access control

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions.

Affected configurations

NVD

Node

zoomzoom_on-premise_meeting_connector_mmrRange<4.8.20220916.131

CPENameOperatorVersion
zoom:zoom_on-premise_meeting_connector_mmrzoom zoom on-premise meeting connector mmrlt4.8.20220916.131

CPE	Name	Operator	Version
zoom:zoom_on-premise_meeting_connector_mmr	zoom zoom on-premise meeting connector mmr	lt	4.8.20220916.131

CNA Affected

[
  {
    "vendor": "Zoom Video Communications Inc",
    "product": "Zoom On-Premise Meeting Connector MMR",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "4.8.20220916.131",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

explore.zoom.us/en/trust/security/security-bulletin/

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

Related for CVE-2022-28761

prion1 cvelist1 nvd1