Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-28749

Insufficient Authorization Check During Meeting Join

Description

Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc On-Premise Meeting Connectors

  • unspecified to < 4.8.113.20220526affected

References