Zoom Workplace VDI Plugin macOS Universal Installer Symlink Following Information Disclosure Vulnerability

A symlink following vulnerability has been identified in the Zoom Workplace VDI Plugin macOS Universal installer, affecting versions prior to 6.3.14, 6.4.14, and 6.5.10 in their respective tracks. This vulnerability may allow an authenticated user to disclose information via network access.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users are advised to update to the latest version of the Zoom Workplace VDI Plugin for macOS. The latest version can be downloaded from the Zoom Download Center.