Update package downgrade in Zoom Client for Meetings for MacOS

Vulnerability

The Zoom Client for Meetings for macOS (Standard and IT Admin) versions prior to 5.9.6 fail to verify the package version during the update process [1]. An attacker can exploit this to replace the current installation with a less secure version.

Exploitation

The attacker must have a privileged network position to perform a man-in-the-middle attack or control the update server, or otherwise be able to intercept and modify the update response. They can then serve a crafted update package that appears to be a valid update but is actually an older, less secure version of the client.

Impact

Successful exploitation results in the user's Zoom client being downgraded to a version with known vulnerabilities, potentially allowing further compromise of the user's system or communications.

Mitigation

Update to Zoom Client for Meetings version 5.9.6 or later [1]. No workaround is mentioned; users should ensure automatic updates are enabled or apply the update manually.