CVE-2020-27610

2020-10-2115:15:27

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external interfaces, and does not automatically set up a firewall configuration to block external access.

CPENameOperatorVersion
bigbluebuttoneq2.2.3
bigbluebuttoneq0.9.2
bigbluebuttoneq2.2-beta-6
bigbluebuttoneq0.8
bigbluebuttoneq2.2.17
bigbluebuttoneq2.2.24
bigbluebuttoneq2.2-beta-14
bigbluebuttoneq2.2-beta-8
bigbluebuttoneq2.2.1
bigbluebuttoneq2.2-beta-10

Name	Operator	Version
bigbluebutton	eq	2.2.3
bigbluebutton	eq	0.9.2
bigbluebutton	eq	2.2-beta-6
bigbluebutton	eq	0.8
bigbluebutton	eq	2.2.17
bigbluebutton	eq	2.2.24
bigbluebutton	eq	2.2-beta-14
bigbluebutton	eq	2.2-beta-8
bigbluebutton	eq	2.2.1
bigbluebutton	eq	2.2-beta-10