CVE-2022-22785

CVSS v3 5.9 MEDIUM
CVSS v2.0 6.4 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

T

he Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-scoped session cookies to a non-Zoom domain. This could potentially allow for spoofing of a Zoom user.

References

Link	Resource
https://explore.zoom.us/en/trust/security/security-bulletin	Vendor Advisory
https://explore.zoom.us/en/trust/security/security-bulletin	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:zoom:meetings::::::android::*
	cpe:2.3:a:zoom:meetings::::::iphone_os::*
	cpe:2.3:a:zoom:meetings::::::linux::*
	cpe:2.3:a:zoom:meetings::::::macos::*
	cpe:2.3:a:zoom:meetings::::::windows::*

History

21 Nov 2024, 06:47

Type	Values Removed	Values Added
References	~~() https://explore.zoom.us/en/trust/security/security-bulletin - Vendor Advisory~~	() https://explore.zoom.us/en/trust/security/security-bulletin - Vendor Advisory
CVSS	v2 : ~~6.4~~ v3 : ~~9.1~~	v2 : 6.4 v3 : 5.9

Information

Published : 2022-05-18 16:15

Updated : 2024-11-21 06:47

NVD link : CVE-2022-22785

Mitre link : CVE-2022-22785

CVE.ORG link : CVE-2022-22785

JSON object : View

Products Affected

meetings

CWE

CWE-565

Reliance on Cookies without Validation and Integrity Checking

{"id": "CVE-2022-22785", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2022-05-18T16:15:08.697", "references": [{"url": "https://explore.zoom.us/en/trust/security/security-bulletin", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://explore.zoom.us/en/trust/security/security-bulletin", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-565"}]}], "descriptions": [{"lang": "en", "value": "The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains. This issue could be used in a more sophisticated attack to send an unsuspecting users Zoom-scoped session cookies to a non-Zoom domain. This could potentially allow for spoofing of a Zoom user."}, {"lang": "es", "value": "Zoom Client for Meetings (para Android, iOS, Linux, MacOS y Windows) versiones anteriores a 5.10.0, no restringe apropiadamente las cookies de sesi\u00f3n del cliente a los dominios de Zoom. Este problema podr\u00eda ser usado en un ataque m\u00e1s sofisticado para enviar a un usuario desprevenido las cookies de sesi\u00f3n de Zoom a un dominio que no es de Zoom. Esto podr\u00eda permitir la suplantaci\u00f3n de un usuario de Zoom"}], "lastModified": "2024-11-21T06:47:26.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "257325E7-C897-49A8-8F82-7AF256A356C5", "versionEndExcluding": "5.10.0"}, {"criteria": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:*", "vulnerable": true, "matchCriteriaId": "E22CE428-4C2A-4D98-A05C-0DC947511A82", "versionEndExcluding": "5.10.0"}, {"criteria": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:linux:*:*", "vulnerable": true, "matchCriteriaId": "BB3D750A-6070-43B9-8D2F-0BF840FAEAAE", "versionEndExcluding": "5.10.0"}, {"criteria": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:macos:*:*", "vulnerable": true, "matchCriteriaId": "AD42820E-D045-4AE0-8A35-9B4E3007B71A", "versionEndExcluding": "5.10.0"}, {"criteria": "cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "DDF53A4B-7533-4DDA-9BEF-C803127FEDDD", "versionEndExcluding": "5.10.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}