Skip to main content

Meetings CVE-2022-22785

CRITICAL
Reliance on Cookies without Validation and Integrity Checking (CWE-565)
2022-05-18 security@zoom.us
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
May 18, 2022 - 16:15 nvd
CRITICAL 9.1

DescriptionNVD

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-scoped session cookies to a non-Zoom domain. This could potentially allow for spoofing of a Zoom user.

AnalysisAI

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-565. The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-scoped session cookies to a non-Zoom domain. This could potentially allow for spoofing of a Zoom user. Affected products include: Zoom Meetings. Version information: version 5.10.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2020-11469 HIGH POC
7.8 Apr 01

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during install

CVE-2020-11877 HIGH POC
7.5 Apr 17

airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector (IV) for AES-256 CBC e

CVE-2020-11876 HIGH POC
7.5 Apr 17

airhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242 for initialization of a

CVE-2020-11500 HIGH POC
7.5 Apr 03

Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption. Rated high severity (CVS

CVE-2021-34423 CRITICAL
9.8 Nov 24

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)

CVE-2021-33907 CRITICAL
9.8 Sep 27

The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate informa

CVE-2022-28763 CRITICAL
9.6 Oct 31

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL

CVE-2023-43582 HIGH
8.8 Nov 15

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo

CVE-2022-22786 HIGH
8.8 May 18

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before ver

CVE-2022-22784 HIGH
8.1 May 18

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly pars

CVE-2023-28596 HIGH
7.8 Mar 27

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. Rate

CVE-2023-22883 HIGH
7.8 Mar 16

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. Ra

Share

CVE-2022-22785 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy