Design/Logic Flaw

2020-04-0122:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user’s privileges) to obtain root access by replacing runwithroot.

CPENameOperatorVersion
meetingsle4.6.8

CPE	Name	Operator	Version
	meetings	le	4.6.8

References

blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/

objective-see.com/blog/blog_0x56.html