Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Workplace_desktop | Zoom | * | 6.4.13 (excluding) |
Potential Mitigations
Related Attack Patterns
References
- https://https://www.zoom.com/en/trust/security-bulletin/zsb-25023/