CVE-2022-28753
High
Description
Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability. As a result, a malicious actor can join a meeting which they are authorized to join without appearing to the other participants, can admit themselves into the meeting from the waiting room, and can become host and cause other meeting disruptions.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Zoom Meeting Connector
PublishedAug 11, 2022
First seenAug 11, 2022
Weakness typeCWE-284Improper access control
How to fix
Update
- zoom meeting_connector4.8.129.20220714 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zoom meeting_connector | v < 4.8.129.20220714 | 4.8.129.20220714 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.