CVE-2022-28764lowCWE-200

CVE-2022-28764: falha de baixa gravidade em Zoom Client for Meetings (for Android, iOS…

Local information exposure in Zoom Clients

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zoom Client for Meetings+ Monitorar Zoom Rooms for Conference Room

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.3%
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Zoom Video Communications Inc · Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)Zoom Video Communications Inc · Zoom Rooms for Conference Room (for Android, iOS, Linux, macOS, and Windows)Zoom Video Communications Inc · Zoom VDI Windows Meeting Clients
CVEs relacionadas — Zoom Client for Meetings (for Android, iOS…

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34423HIGHBuffer overflow in Zoom client and other productsEPSS 3.3%CVE-2021-34424MEDIUMProcess memory exposure in Zoom Client and other productsEPSS 1.7%CVE-2022-28763HIGHImproper URL parsing in Zoom ClientsEPSS 1.5%CVE-2022-28755CRITICALImproper URL parsing in Zoom ClientsEPSS 0.9%CVE-2022-22782HIGHLocal privilege escalation in Windows Zoom ClientsEPSS 0.4%