Skip to content
OpenAdvisories
High · 8.2 CVE-2022-28758 EUVD-2022-33197GHSA-4m4g-fwv8-47j2

Zoom On-Premise Deployments: Improper Access Control

Published Sep 16, 2022 · Updated Sep 17, 2024 · Assigned by Zoom

Description

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom On-Premise Meeting Connector MMR unspecified – < 4.8.20220815.130 4.8.20220815.130

References