TMA-ZOOM-AUTO-UPDATE

Ensure Zoom client automatic updates are enabled by policy

VisokaNivo 1Automatskazoom

Opis

Zoom clients have a long history of exploitable vulnerabilities; updates must not depend on users. Audit reads HKLM:\SOFTWARE\Policies\Zoom\Zoom Meetings\General and is compliant when AU2_EnableAutoUpdate (current auto-update v2 policy) or the legacy EnableClientAutoUpdate is 1. Zoom states that setting any AU2_ key disables the legacy update keys.

Kako se proverava

Metod provere: Windows registar

registry

$k = Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Zoom\Zoom Meetings\General' -ErrorAction SilentlyContinue; if ($null -eq $k) { 'unset' } elseif ("$($k.AU2_EnableAutoUpdate)" -eq '1' -or (("$($k.AU2_EnableAutoUpdate)" -eq '') -and "$($k.EnableClientAutoUpdate)" -eq '1')) { 'compliant' } else { 'non-compliant' }

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Deploy the Zoom ZoomMeetings_HKLM.admx template and enable the automatic update policy (AU2_EnableAutoUpdate = 1, optionally AU2_SetUpdateChannel), or install with the MSI property AU2_EnableAutoUpdate=true. Policy values live under HKLM:\SOFTWARE\Policies\Zoom\Zoom Meetings\General.

Svojstva

Operativni sistemi: Bilo koji
Oznake: zoomupdates
Referenca: CIS Zoom Benchmark v1.0.0 - Client automatic updates

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target zoom