Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-28764
HistoryNov 14, 2022 - 9:15 p.m.

Information disclosure

2022-11-1421:15:00
PRIOn knowledge base
www.prio-n.com
3
zoom
client
vulnerability
local information exposure
android
ios
linux
macos
windows
version 5.12.6
sql database
per-device key
encrypting
malicious user
meeting information
chat
nvd

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2022-28764