SecuritySpace - CVE-2021-34409

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-34409

Description: It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post- installation shell scripts to a user-writable directory. In the affected products listed below, a malicious actor with local access to a user's machine could use this flaw to potentially run arbitrary system commands in a higher privileged context during the installation process.

Test IDs: 1.3.6.1.4.1.25623.1.0.118238

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-34409
https://explore.zoom.us/en/trust/security/security-bulletin
https://explore.zoom.us/en/trust/security/security-bulletin

CVE ID:	CVE-2021-34409
Description:	It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post- installation shell scripts to a user-writable directory. In the affected products listed below, a malicious actor with local access to a user's machine could use this flaw to potentially run arbitrary system commands in a higher privileged context during the installation process.
Test IDs:	1.3.6.1.4.1.25623.1.0.118238
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-34409 https://explore.zoom.us/en/trust/security/security-bulletin https://explore.zoom.us/en/trust/security/security-bulletin