Zoom Workplace and Meeting SDK for macOS Path Traversal Vulnerability Allowing Information Disclosure

A vulnerability exists in Zoom Workplace for macOS and the Zoom Workplace Meeting SDK for macOS, both prior to version 6.5.10. This vulnerability allows authenticated users to manipulate file names or paths, potentially leading to unauthorized information disclosure through local access.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users are advised to update to the latest version of Zoom Workplace for macOS or the Zoom Workplace Meeting SDK for macOS. The latest version can be downloaded from the Zoom Download Center.