CVE:CVE-2021-34409
CNNVD:CNNVD-202109-1805
ZOOM Client是美国ZOOM公司的一款支持多种平台的视频会议客户端应用程序。
Zoom Client for Meetings for MacOS 5.2.0之前版本存在安全漏洞，该漏洞源于安装过程中解压的用户可写安装前和安装后脚本允许权限升级到root用户。
solution:Upgrade zoom meetings to a higher version than 5.2.0,and avoid the version (,5.2.0); Upgrade zoom rooms to a higher version than 5.1.0,and avoid the version (,5.1.0); Upgrade zoom screen_sharing to a higher version than 5.2.0,and avoid the version (,5.2.0)