Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-28761 EUVD-2022-33200GHSA-535x-2h8c-88m2

Zoom On-Premise Deployments: Improper Access Control

Published Oct 14, 2022 · Updated May 14, 2025 · Assigned by Zoom

Description

Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a meeting or webinar they are authorized to join could prevent participants from receiving audio and video causing meeting disruptions.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom On-Premise Meeting Connector MMR unspecified – < 4.8.20220916.131 4.8.20220916.131

References