Test ID:	1.3.6.1.4.1.25623.1.0.147227
Category:	General
Title:	Zoom Client < 5.5.4 Signature Bypass Vulnerability (ZSB-21016) - Windows
Summary:	The Zoom Client is prone to a signature bypass vulnerability.
Description:	Summary: The Zoom Client is prone to a signature bypass vulnerability. Vulnerability Insight: The Zoom Client for Meetings for Windows installer does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer's computer. Affected Software/OS: Zoom Client prior to version 5.5.4. Solution: Update to version 5.5.4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-34420 https://explore.zoom.us/en/trust/security/security-bulletin https://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.