CVE-2022-28759

Summary (CVE-2022-28759): Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 are affected by an improper access control vulnerability that could allow a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join and potentially disrupt m...

CVE-2022-28759 Zoom On-Premise Deployments: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28760

The CVE-2022-28760 issue affects Zoom On-Premise Meeting Connector MMR prior to 4.8.20220815.130, caused by improper access control that could allow an unauthorized user to obtain the audio and video feeds of a meeting and cause disruptions. Affected product: Zoom On-Premise Meeting Connector MMR...

CVE-2022-28759: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28761: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions...

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28758

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28758

The CVE-2022-28758 entry concerns Zoom On-Premise Meeting Connector MMR prior to 4.8.20220815.130, with an improper access control flaw. The issue could allow a malicious actor to obtain the audio and video feeds of a meeting they are not authorized to join, potentially causing other meeting disr...

CVE-2022-28758: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...

CVE-2022-28753 Zoom On-Premise Deployments: Improper Access Control Vulnerability

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the...

CVE-2022-28753

CVE-2022-28753 affects Zoom On-Premise Meeting Connector MMR before 4.8.129.20220714. The issue is improper access control that lets a participant join a meeting without appearing to others, admit themselves from the waiting room, and escalate to host, enabling disruptions. Affected versions are ...

CVE-2022-28754 Zoom On-Premise Deployments: Improper Access Control Vulnerability

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the...

CVE-2022-28754

CVE-2022-28754 – Zoom On-Premise Meeting Connector MMR is affected in versions prior to 4.8.129.20220714. The issue is an improper access control that lets a legitimate participant join without appearing to others, admit themselves from the waiting room, and assume host privileges, causing meetin...

CVE-2022-28754: Improper Access Control

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the...

CVE-2022-28749

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host...

CVE-2022-28749

Affected software: Zoom On-Premise Meeting Connector MMR (versions prior to 4.8.113.20220526). Issue: improper permission checking for attendees in the waiting room, enabling a threat actor to join a meeting without the host’s consent. Impact: unauthorized entry into meetings (no host permission)...

CVE-2022-22783

Summary: CVE-2022-22783 affects Zoom On-Premise Meeting Connector Controller and MMR 4.8.102.20220310. The issue exposes process memory fragments to connected clients, which a passive attacker could observe, per NVD and PT-2022-15675 sources. Affected components: Zoom On-Premise Meeting Connector...

Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers

An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could have been exploited to crash the service, execute malicious code, and even leak arbitrary areas of its memory. Natalie Silvanovic...

Design/Logic Flaw

A vulnerability was discovered in the Zoom Client for Meetings for Android, iOS, Linux, macOS, and Windows before version 5.8.4, Zoom Client for Meetings for Blackberry for Android and iOS before version 5.8.1, Zoom Client for Meetings for intune for Android and iOS before version 5.8.4, Zoom...

CVE-2021-34417 Authenticated remote command execution with root privileges via web console in MMR

The network proxy page on the web portal for the Zoom On-Premise Meeting Connector Controller before version 4.6.365.20210703, Zoom On-Premise Meeting Connector MMR before version 4.6.365.20210703, Zoom On-Premise Recording Connector before version 3.8.45.20210703, Zoom On-Premise Virtual Room...