Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-22783 EUVD-2022-27926GHSA-3fqc-qp8w-rr4h

Process memory exposure in Zoom on-premise Meeting services

Published Apr 28, 2022 · Updated Sep 17, 2024 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom On-Premise Meeting Connector Controller Product: Zoom On-Premise Meeting Connector MMR

Description

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom On-Premise Meeting Connector Controller 4.8.102.2022031 —
Zoom Video Communications Zoom On-Premise Meeting Connector MMR 4.8.102.20220310 —

References