CVE-2020-11876

airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of an OpenSSL EVP AES-256 CBC context. NOTE: the vendor states that this initialization only occurs within unreachable code...

Zoom Client Encryption Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. An encryption issue vulnerability exists in Zoom Client for Meetings version 4.6.11, which stems from the airhost.exe file using 3423423432325249 as the initialization vector IV for AES-256 CBC...

CVE-2020-11876

Zoom Client for Meetings 4.6.11 uses airhost.exe to initialize an OpenSSL EVP AES-256 CBC context via the SHA-256 hash of the string 0123425234234fsdfsdr3242. Vendor states this initialization occurs only in unreachable code. Public Corp/CVE data indicate impact to confidentiality (CVSS3 base 7.5...