Intrusion PreventionZoom.Client.Unauthorized.Video.Call.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Zoom Client.
A remote unauthenticated attacker can exploit this vulnerability by enticing the victim to open a crafted web page. Successful exploitation will force a user to join a video call with the video camera active.
Affected Products
Zoom Client through 4.4.4
RingCentral 7.0.136380.0312
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://zoom.us/download
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48218 |
| Created | Aug 02, 2019 |
| Updated | Oct 23, 2019 |
| Risk |
|
| CVE ID | CVE-2019-13450 |
| Exploit Prediction Score | 87.77% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Other |