CVE-2019-19810

2021-10-2810:23:08

mitre

www.cve.org

zoom call recording

eleveo

java deserialization

vulnerability

rmi service

remote attack

arbitrary code

AI Score

9.8

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote unauthenticated attacker can exploit this vulnerability by sending crafted RMI requests to execute arbitrary code on the target host.