Design/Logic Flaw

2022-04-2815:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker.

CPENameOperatorVersion
zoom_on-premise_meeting_connector_controllereq4.8.102.20220310
zoom_on-premise_meeting_connector_mmreq4.8.102.20220310

CPE	Name	Operator	Version
	zoom_on-premise_meeting_connector_controller	eq	4.8.102.20220310
	zoom_on-premise_meeting_connector_mmr	eq	4.8.102.20220310

References

explore.zoom.us/en/trust/security/security-bulletin/