CVE-2022-28761: falha de média gravidade em Zoom On-Premise Meeting Connector MMR
Zoom On-Premise Deployments: Improper Access Control
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.8%
Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVEs relacionadas — Zoom On-Premise Meeting Connector MMR
No mesmo produto, das mais perigosas para as menos.
CVE-2021-34423HIGHBuffer overflow in Zoom client and other productsEPSS 3.3%CVE-2021-34417HIGHAuthenticated remote command execution with root privileges via web console in MMREPSS 1.2%CVE-2022-22783MEDIUMProcess memory exposure in Zoom on-premise Meeting servicesEPSS 1.0%CVE-2022-28758HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28759HIGHZoom On-Premise Deployments: Improper Access ControlEPSS 0.7%CVE-2022-28760MEDIUMZoom On-Premise Deployments: Improper Access ControlEPSS 0.6%