Security News > 2020 > January > Vulnerability Allowed Attackers to Join Zoom Meetings

Vulnerability Allowed Attackers to Join Zoom Meetings
2020-01-28 19:21

A vulnerability in the Zoom online meeting system could allow attackers eavesdrop on meetings and view all shared content, Check Point security researchers have discovered.

What Check Point's security researchers discovered was that an attacker could predict Meeting IDs and potentially join active meetings.

Zoom now requires a password when scheduling new meetings, for instant meetings, and for Personal Meeting ID. Furthermore, Zoom will no longer automatically indicate if a meeting ID is valid or invalid.

Zoom is not alone in exposing online meetings to possible eavesdropping.

Late last week, Cisco warned customers that attackers had actively exploited a vulnerability that allowed unauthorized users to join password-protected Webex meetings.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/yuPzw_Lmor0/vulnerability-allowed-attackers-join-zoom-meetings

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Zoom 52 4 50 57 9 120