QID 377758

Zoom provides video communications with a cloud platform for video and audio conferencing, chat, and webinars across mobile, desktop, and room systems.

CVE-2022-28764: A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.

Affected Versions:
Zoom VDI Windows Meeting Clients prior to version 5.12.6

QID Detection Logic:
This authenticated QID detects vulnerable Zoom VDI Windows Meeting Clients prior to version 5.12.6 on Windows

Successful exploitation of this vulnerability may allow local attacker to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.