CVE-2020-27610: Undefined Security Weakness

The installation procedure in BigBlueButton before 2.2.28 or earlier exposes certain network services to external interfaces, and does not automatically set up a firewall configuration to block external access...

CVE-2020-27602: Improper Neutralization of Special Elements in Output Used by a Downstream Component

BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authToken...

CVE-2020-27609: Incorrect Authorization

BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. This may result in data storage beyond what is authorized for a specific meeting topic or participant...

CVE-2020-27613: Cleartext Storage of Sensitive Information

The installation procedure in BigBlueButton before 2.2.28 or earlier uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access...

CVE-2020-27612: Exposure of Sensitive Information to an Unauthorized Actor

Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window...

CVE-2020-27608: Improper Neutralization of Input During Web Page Generation

In BigBlueButton before 2.2.28 or earlier, uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as demonstrated by a .png file extension for an HTML document...

CVE-2020-27606: Undefined Security Weakness

BigBlueButton before 2.2.28 or earlier does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2020-27605: Undefined Security Weakness

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox."...

CVE-2020-27607: Undefined Security Weakness

In BigBlueButton before 2.2.28 or earlier, the client-side Mute button only signifies that the server should stop accepting audio data from the client. It does not directly configure the client to stop sending audio data to the server, and thus a modified server could store the audio data and/or...

CVE-2020-27601: Exposure of Resource to Wrong Sphere

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js...

CVE-2020-27603: Undefined Security Weakness

BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files...

CVE-2020-27604: Improper Encoding or Escaping of Output

BigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for remote authenticated users to read the API shared secret in the bigbluebutton.properties file. With the API shared secret, an attacker can for example use api/join to join an arbitrary meeting...

CVE-2020-25820: Server-Side Request Forgery (SSRF)

BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field...

PT-2020-16717

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.28 Description The issue arises from the client-side Mute button's behavior, which only signals the server to stop accepting audio data from the client but does not directly configure the client to stop...

PT-2020-16723

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.28 Description The installation procedure in BigBlueButton uses ClueCon as the FreeSWITCH password, allowing local users to achieve unintended FreeSWITCH access. Recommendations For versions prior to 2.2.28,...

PT-2020-16713

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.27 Description The issue is related to an unsafe JODConverter setting in BigBlueButton, which allows LibreOffice document conversions to access external files. This could potentially lead to security issues...

PT-2020-16715

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.3 Description The issue is related to the use of Ghostscript for processing uploaded EPS documents, which may lead to attacks due to a weak sandbox. Recommendations For versions prior to 2.3, update to version...

PT-2020-16714

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.3 Description The issue is related to the lack of LibreOffice sandboxing, which could allow remote authenticated users to read the API shared secret in the bigbluebutton.properties file. With access to the API...

PT-2020-16718

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.28 Description The issue allows for XSS attacks due to uploaded presentations being sent to clients without a Content-Type header. This can be exploited by uploading an HTML document with a .png file...

PT-2020-16716

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 2.2.28 Description The issue concerns the failure to set the secure flag for the session cookie in an https session. This makes it easier for remote attackers to capture the cookie by intercepting its transmissi...