Vulnerability Description
Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root access by replacing runwithroot.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zoom | Meetings | <= 4.6.8 |
Related Weaknesses (CWE)
References
- https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/Vendor Advisory
- https://objective-see.com/blog/blog_0x56.htmlExploitThird Party Advisory
- https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/Vendor Advisory
- https://objective-see.com/blog/blog_0x56.htmlExploitThird Party Advisory
FAQ
What is CVE-2020-11469?
CVE-2020-11469 is a vulnerability with a CVSS score of 7.8 (HIGH). Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root ...
How severe is CVE-2020-11469?
CVE-2020-11469 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11469?
Check the references section above for vendor advisories and patch information. Affected products include: Zoom Meetings.