Test ID:	1.3.6.1.4.1.25623.1.0.815259
Category:	General
Title:	Zoom Client RCE Vulnerability (ZSB-19003) - Mac OS X
Summary:	Zoom Client is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Zoom Client is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists due to a local web server which is running even after the application has been uninstalled and insecurely receives commands without validation and lets any website to interact with it. Vulnerability Impact: Successful exploitation will allow remote attackers to execute code with a maliciously crafted launch URL. Affected Software/OS: Zoom Client before version 4.4.53932.0709 on Mac OS X. Solution: Update to version 4.4.53932.0709 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-13567 https://gist.github.com/wbowling/13f9f90365c171806b9ffba2c841026b https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS https://twitter.com/JLLeitschuh/status/1149420685405708295 https://twitter.com/JLLeitschuh/status/1149422543658520578 https://twitter.com/riskybusiness/status/1149125147019767814 https://twitter.com/wcbowling/status/1149457231504498689 https://twitter.com/wcbowling/status/1166998107667619841
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.