CVE-2022-22787 is a vulnerability in Zoom Meetings
Published on May 18, 2022
Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.
Vulnerability Analysis
CVE-2022-22787 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity, and a small impact on availability.
Products Associated with CVE-2022-22787
Want to know whenever a new CVE is published for Zoom Meetings? stack.watch will email you.
Affected Versions
Zoom Video Communications Inc Zoom Client for Meetings for Android:- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.