PT-2017-10917

Name of the Vulnerable Software and Affected Versions Opencast versions 2.2.3 and older Description The Opencast search service, used for publication to media modules and players, incorrectly handles access control when user names overlap. This allows users to access recordings by matching only...

CVE-2017-1000221: Incorrect Permission Assignment for Critical Resource

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role...

CVE-2017-1000217: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0...

Opencast Access Restriction Bypass Vulnerability

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A security vulnerability exists in Opencast 2.2.3 and earlier versions. An attacker can exploit the vulnerability to bypass access restrictions...