Zoom Workplace Apps Business Logic Error Allowing Unauthenticated Information Disclosure

A business logic error has been identified in certain Zoom Workplace applications that may enable an unauthenticated user to disclose information through network access. This vulnerability affects several platforms, including desktop applications for Windows, macOS, and Linux, as well as mobile applications for iOS and Android. Additionally, it impacts the Zoom Meeting SDK across various operating systems and the Zoom Rooms App and Controller for multiple platforms.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App. The updated version can be downloaded from the Zoom Download Center.