CVE-2022-28760

Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.

Score
CVSS 3.1 6.5 Medium
Status
Modified - security@zoom.us
Published
2022-10-14
Last modified
2025-05-14
Weaknesses
CWE-284

Affected products

References