Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access.
Weakness
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meeting_software_development_kit | Zoom | * | 5.16.5 (excluding) |
| Video_software_development_kit | Zoom | * | 5.16.5 (excluding) |
| Virtual_desktop_infrastructure | Zoom | * | 5.14.14 (excluding) |
| Virtual_desktop_infrastructure | Zoom | 5.15.0 (including) | 5.15.12 (excluding) |
| Zoom | Zoom | * | 5.16.5 (excluding) |