الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

John Scott-Railton

باحث منCitizen Lab
#41607من 60,403
7.5إجمالي CVSS
الثغرات · 1
PT-2020-12650
2020-04-03
7.5
CVE-2020-11500
Zoom
Zoom Client For Meetings
The issue concerns the use of the ECB mode of AES for encryption, which can reveal structural information about encrypted messages. In the case of Zoom Client for Meetings, all participants in a meeting use a single 128-bit key for video and audio encryption. Similarly, Microsoft Office 365's message encryption uses the ECB mode, allowing attackers to potentially determine the content of encrypted messages by analyzing patterns. This problem was previously identified in 2013 and again in 2020. It is reported that Microsoft has been aware of the issue since January 2022 but has not yet released a fix, although they are working on adding an alternative encryption protocol to future product versions.