Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
Weakness
The UI performs the wrong action with respect to the user’s request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meeting_software_development_kit | Zoom | * | 5.17.0 (excluding) |
| Rooms | Zoom | * | 5.17.0 (excluding) |
| Vdi_windows_meeting_clients | Zoom | * | 5.15.5 (excluding) |
| Vdi_windows_meeting_clients | Zoom | 5.15.15 (excluding) | 5.16.12 (excluding) |
| Vdi_windows_meeting_clients | Zoom | 5.16.12 (excluding) | 5.17.5 (excluding) |
| Zoom | Zoom | * | 5.17.0 (excluding) |