Zoom Workplace Apps Incorrect Ownership Assignment Vulnerability Allowing Information Disclosure

A vulnerability exists in some Zoom Workplace Apps due to incorrect ownership assignment, which may enable a privileged user to disclose information through network access. This issue affects multiple platforms, including Windows, Linux, iOS, and within the Zoom Rooms and VDI Client environments. The vulnerability arises from improper management of ownership rights, potentially allowing unauthorized information access.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure over the network.

Remediation

Users are advised to update to the latest version of the Zoom Workplace App. The updated versions can be downloaded from the Zoom Download Center. For Zoom Rooms and Controllers, version 6.1.0 or later is recommended.