CVE:CVE-2022-22783
CNNVD:CNNVD-202204-4553
Zoom On-​​Premise Meeting Connector Controller是美国Zoom公司的一个内部部署的会议连接器。
Zoom On-​​Premise Meeting Connector Controller 版本 4.8.102.20220310 和 On-Premise Meeting Connector MMR 版本 4.8.102.20220310 存在安全漏洞，该漏洞源于将进程内存碎片暴露给连接的客户端，被动攻击者可以观察到该漏洞。
solution:Upgrade zoom zoom_on-premise_meeting_connector_controller to a higher version than 4.8.102.20220310,and avoid the version 4.8.102.20220310; Upgrade zoom zoom_on-premise_meeting_connector_mmr to a higher version than 4.8.102.20220310,and avoid the version 4.8.102.20220310