Process memory exposure in Zoom on-premise Meeting services

Vulnerability

The Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 expose process memory fragments to connected clients. This vulnerability allows a passive attacker to observe portions of process memory.

Exploitation

An attacker does not require authentication or special privileges. By passively observing network traffic or client connections, the attacker can retrieve memory fragments without active manipulation.

Impact

Successful exploitation results in unauthorized disclosure of process memory fragments, potentially leaking sensitive information such as credentials, session tokens, or other data residing in memory.

Mitigation

Zoom recommends updating to the latest version of the affected software to receive the fix. No specific patched version is listed in the available reference [1]. As of the publication date (2022-04-28), users should upgrade to any version newer than 4.8.102.20220310.