PT-2020-12611 · Zoom · Zoom

Published 2020-05-04 · Updated 2021-07-21 · CVE-2020-11443

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 4.6.10

Description The issue concerns the Zoom IT installer for Windows, which can delete files located in %APPDATA%Zoom before installing an updated version of the client. Since standard users can write to this directory and create links to other directories on the machine, a user can cause the installer to delete files that otherwise cannot be deleted by the user. This is possible because the installer runs with SYSTEM privileges and follows these links.

Recommendations For versions prior to 4.6.10, update to version 4.6.10 or later to resolve the issue. As a temporary workaround, consider restricting write access to the %APPDATA%Zoom directory to prevent users from creating malicious links.

Fix

Link Following

Incorrect Permission

Weakness Enumeration

CWE-59

CWE-732

Related Identifiers

CVE-2020-11443

Affected Products

Zoom

References · 6

• https://support.zoom.us/hc/en-us/articles/360043036451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11443 · Security Note
• https://support.zoom.us/hc/en-us/articles/201361953-New-Updates-for-Windows · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11443 · Vendor Advisory
• https://support.zoom.us/hc/en-us/articles/360043036451-Security-CVE-2020-11443 · Vendor Advisory
• https://t.me/cvenotify/3515 · Telegram Post