CERT-In reports vulnerabilities in Zoom

The Computer Emergency Response Team (CERT-In) released notes on vulnerabilities rated in the medium severity category in the popular video conferencing app Zoom.

The cyber security agency said that vulnerabilities can be exploited by a remote attacker to join meetings they are authorised to join without appearing to other participants. This could enable them to obtain video and audio feed of meetings they were not authorised to join, and even disrupt targeted meetings.

Zoom reported the security flaw on September 13 and CERT-In issued the advisory on Monday. The vulnerabilities have been found to affect Zoom on-premise meeting connectors and exist due to improper access and control implementation.


CERT-In has advised Zoom users to update to the latest version of the Zoom app to avoid any likely security issues.