Description (CNA)
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-scoped session cookies to a non-Zoom domain. This could potentially allow for spoofing of a Zoom user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zoom Video Communications Inc / Zoom Client for Meetings for Android | affected unspecified before 5.10.0 |
| Zoom Video Communications Inc / Zoom Client for Meetings for iOS | affected unspecified before 5.10.0 |
| Zoom Video Communications Inc / Zoom Client for Meetings for Linux | affected unspecified before 5.10.0 |
| Zoom Video Communications Inc / Zoom Client for Meetings for MacOS | affected unspecified before 5.10.0 |
| Zoom Video Communications Inc / Zoom Client for Meetings for Windows | affected unspecified before 5.10.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.