CVE-2022-28749 – Insufficient Authorization Check During Meeting Join

https://notcve.org/view.php?id=CVE-2022-28749

15 Jun 2022 — Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host. Zooms On-Premise Meeting Connector MMR versiones anteriores a 4.8.113.20220526, no comprueba correctamente los permisos de los asistentes a las reuniones de Zoom. Como resultado, un actor de la amenaza en la sala de espera de Zooms puede unirse a la reunión sin el ... • https://explore.zoom.us/en/trust/security/security-bulletin •