CVE-2022-28764 Local information exposure in Zoom Clients
A local attacker can access previous meeting data, including chat logs, due to insufficient data clearing and weak encryption in the Zoom Client.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-28764?
CVE-2022-28764 is a low-severity vulnerability in Zoom Rooms, published on 14 Nov 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
Which versions are affected by CVE-2022-28764?
It affects 3 products.
Products include Zoom Meetings, Zoom Rooms, Zoom Vdi Windows Meeting Clients.
How do I fix CVE-2022-28764?
No fix has been published for CVE-2022-28764 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-28764 being exploited?
There is no known exploitation of CVE-2022-28764 in the wild and no public exploit code.
Other vulnerabilities in Zoom Rooms
- CVE-2021-33907 Code injection in Zoom Client for Meetings for Windows
- CVE-2022-28768 Local Privilege Escalation in Zoom Client Installer for macOS
- CVE-2022-28763 Improper URL parsing in Zoom Clients
- CVE-2022-28757 Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
- CVE-2022-28751 Local Privilege Escalation in Zoom Client for Meetings for MacOS
Sources
Also known as GHSA-3469-4crg-fcc8.