Information disclosure in Zoom client for Windows



Published: 2020-04-01 | Updated: 2020-04-21
Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE ID N/A
CWE ID CWE-807
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
Zoom Client for Windows
Client/Desktop applications / Multimedia software

Vendor Zoom Video Communications, Inc.

Security Advisory

Updated: 21.04.2020

Changed bulletin status to patched.

1) Reliance on Untrusted Inputs in a Security Decision

Risk: Medium

CVSSv3.1: 6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:U/RC:C] [PCI]

CVE-ID: N/A

CWE-ID: CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Zoom client for Windows automatically processes comments in chat and converts URLs with UNC path into links. A remote attacker can trick the victim into following this link and gain access to NTLM credentials, sent by the victim's system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Zoom Client for Windows: 0.9.10042.0911, 0.9.10894.0925, 0.92.12362.1030, 0.92.13003.1113, 1.0.17717.0126, 1.0.18174.0205, 1.0.18485.0222, 1.0.18584.0225, 1.0.19767.0322, 2.0.24227.0531, 2.0.24278.0602, 2.0.24622.0608, 2.0.26494.0729, 2.0.27343.0826, 2.0.28860.0927, 2.0.30025.1017, 2.0.31403.1104, 2.5.34803.1214, 2.5.34846.1216, 2.5.35125.1230, 2.5.35232.0103, 2.5.40060.0120, 2.5.40202.0303, 2.5.40309.0317, 2.5.40309.0319, 2.5.40422.0328, 2.5.40542.0410, 3.0.45732.0815, 3.0.46200.0828, 3.0.46609.0915, 3.0.46825.0919, 3.0.46995.0924, 3.0.47216.0929, 3.0.47252.0930, 3.0.48496.1031, 3.0.48880.1117, 3.5.6299.1228, 3.5.6760.0109, 3.5.7727.0123, 3.5.8412.0202, 3.5.9196.0212, 3.5.10908.0316, 3.5.15506.0508, 3.5.17994.0608, 3.5.19597.0626, 3.5.19869.0701, 3.5.22132.0730, 3.5.24604.0824, 3.6.12652.1121, 4.0.35295.0605, 4.0.36525.0619, 4.0.38982.0714, 4.1.8826.0925, 4.1.9355.0929, 4.1.10062.1016, 4.1.11049.1024, 4.1.16699.1208, 4.1.17379.1218, 4.1.20185.0205, 4.1.24407.0507, 4.1.24919.0512, 4.1.25010.0522, 4.1.27348.0625, 4.1.27507.0627, 4.1.27695.0702, 4.1.27702.0702, 4.5.9 5752.1110, 4.5.10 5757.1111, 4.6.0 13610.1201, 4.6.2 14747.1216, 4.6.4 17409.0120, 4.6.6 17964.0224, 4.6.7 18176.0301, 4.6.8 19178.0323

CPE External links

https://www.bleepingcomputer.com/news/security/zoom-client-leaks-windows-login-credentials-to-attackers/
https://support.zoom.us/hc/en-us/articles/201361953-New-Updates-for-Windows

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###