A security vulnerability has been discovered in Zoom Workplace that could allow attackers to escalate their privileges on affected systems.
The flaw, rated with a CVSS score of 7.5, stems from improper verification of cryptographic signatures in the Zoom Workplace VDI Client installer.
Due to the severity of the potential risk if exploited, the company has issued a patch for users to fix the flaw.
Examining the Issue
The vulnerability in the Zoom Workplace VDI Client installer means the installer doesn’t verify whether installation files are legitimate before running them.
Although this is an issue in itself, the real problem occurs if systems are already breached. Attackers who already have local access to a system can exploit this flaw to escalate their privileges - from a regular user to an administrator. Once inside, they can access sensitive data or install malware that affects the entire organization.
Security researchers at Mandiant, a Google-owned threat intelligence firm, discovered and reported the issue to Zoom, which has since released a patch.
Organizations using Zoom Workplace VDI Client for Windows are at risk if they are running any version earlier than:
