Does anybody know whether RingCentral is impacted by the zoom.us vulnerabilities in the press over the last couple of days ?

Question

Answer 1 · 2020-04-06T16:34:59Z

mary-rose answered Apr 6, '20 chris-verdin522 commented Apr 6, '20

Hello Andrew!

RingCentral is not aware of any customers impacted or breached by this vulnerability.

But to make sure, here are some best practices for your security;

Users can mitigate the exposure by going to the Meeting Options section and selecting Require meeting password when scheduling a meeting
Enable the Waiting Room feature for RingCentral Meetings

1

1 |1000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

chris-verdin522 commented · Apr 06, 2020 at 10:56 PM

This is regarding the Zoom exploit - On Windows devices, one expert found that criminals could exploit a flaw in the Zoom chat feature to steal login details. Speaking on Twitter, the researcher known as @_godmode outlined how the part of Zoom's chat feature that converts URLs into hyperlinks can also do the same for Windows networking UNC paths, turning them into a clickable link that if accessed, could reveal login information.

Can you confirm that RC Meetings doesn't have this vulnerability as well?

1 ·

Answer 2 · 2020-04-06T18:41:09Z

andrew-weston1 answered Apr 6, '20

Thanks Mary

1 |1000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Answer 3 · 2020-04-13T14:13:04Z

jessicahernandez16518 answered Apr 13, '20 chris-verdin522 commented May 4, '20

Hello,

Please review additional information here:

https://support.ringcentral.com/s/ringcentral-meetings-security-response?language=en_US

13

1 |1000

Attachments: Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

chris-verdin522 commented · Apr 22, 2020 at 07:58 PM

Thank you!!!

1 ·

jessicahernandez16518 ♦♦ commented · May 04, 2020 at 05:18 PM

It wasn't a standalone release, only an update. All notes can be found here .

1 ·

chris-verdin522 commented · Apr 13, 2020 at 10:33 PM

Thank you. So it is vulnerable to the UNC path issue affected on Windows 10 devices.

0 ·

chris-verdin522 commented · Apr 13, 2020 at 10:35 PM

Do we have on ETA on the Zoom exploit in RC Meetings for UNC paths? We can't do what you request for Group Policy because it breaks everything we do in the company.

0 ·

jessicahernandez16518 ♦♦ commented · Apr 16, 2020 at 02:14 PM

Hi Chris, I'm following up with our meetings product team.

0 ·

Show more comments

question