cancel
Showing results for 
Search instead for 
Did you mean: 

We think zoom with a security issue: user can request account ownership without approve

redious
Listener

number user can request account ownership , and he will get the owner role in 72 hours  by default,

we think it was very dangerous, it was ZOOM SECURITY BUG!!! 

2 REPLIES 2

Bort
Community Champion | Zoom Employee
Community Champion | Zoom Employee

Hi @redious 

This is expected behavior for Pro accounts: https://support.zoom.us/hc/en-us/articles/115005686983-Changing-the-account-owner

This is designed to ensure that the loss of the account owner does not permanently disable an account. By default, only admins on a Pro account can request ownership, but if there are no admins, then normal members will have the ability to request it as well. 

As you stated, the owner receives an email about the request and has up to 72 hours to respond before the request is automatically fulfilled.

 

If you need ownership returned to the original host, you can contact Zoom Support to assist. 

Bort
Community Champion | Zoom Employee
Community Champion | Zoom Employee

The good news is that this weekend we are changing the time frame in which the owner must respond to that email. The owner will have 7 days, instead of 3 days. Check out the web releases notes for more info about this update: https://support.zoom.us/hc/en-us/articles/204758419