Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via adjacent access.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meeting_software_development_kit | Zoom | * | 6.5.10 (excluding) |
| Workplace_desktop | Zoom | * | 6.5.10 (excluding) |
| Workplace_virtual_desktop_infrastructure | Zoom | * | 6.3.14 (excluding) |
| Workplace_virtual_desktop_infrastructure | Zoom | 6.4.10 (including) | 6.4.12 (excluding) |