Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

John Scott-Railton

Researcher fromCitizen Lab
#41730of 60,403
7.5Total CVSS
Vulnerabilities · 1
PT-2020-12650
2020-04-03
7.5
CVE-2020-11500
Zoom
Zoom Client For Meetings
The issue concerns the use of the ECB mode of AES for encryption, which can reveal structural information about encrypted messages. In the case of Zoom Client for Meetings, all participants in a meeting use a single 128-bit key for video and audio encryption. Similarly, Microsoft Office 365's message encryption uses the ECB mode, allowing attackers to potentially determine the content of encrypted messages by analyzing patterns. This problem was previously identified in 2013 and again in 2020. It is reported that Microsoft has been aware of the issue since January 2022 but has not yet released a fix, although they are working on adding an alternative encryption protocol to future product versions.