Skip to content
OpenAdvisories
High · 8.2 CVE-2022-28759 EUVD-2022-33198GHSA-x49r-3x2g-9xh4

Zoom On-Premise Deployments: Improper Access Control

Published Oct 14, 2022 · Updated May 14, 2025 · Assigned by Zoom

Description

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom On-Premise Meeting Connector MMR unspecified – < 4.8.20220815.130 4.8.20220815.130

References