CVE-2022-22787
Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L
Produtos afetados
Zoom Video Communications Inc · Zoom Client for Meetings for AndroidZoom Video Communications Inc · Zoom Client for Meetings for iOSZoom Video Communications Inc · Zoom Client for Meetings for LinuxZoom Video Communications Inc · Zoom Client for Meetings for MacOSZoom Video Communications Inc · Zoom Client for Meetings for WindowsQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →