8x8: @jitsi/docker-jitsi-meet: `/colibri-relay-ws/` unsafe nginx regex (OCTO relay configuration)

An unsafe nginx regex pattern was discovered in the /colibri-relay-ws/ location of the @jitsi/docker-jitsi-meet project. The regex a-zA-Z0-9-\.+ accepted arbitrary domain names and IP addresses for proxypass directives, allowing unauthenticated requests to be proxied to attacker-specified...

8x8 Docker Jitsi Meet Trust Management Issues Vulnerability

8x8 Docker Jitsi Meet is a tool for building Jitsi Meet video conferencing solutions in Docker from 8x8 USA. A security vulnerability exists in previous versions of 8x8 Docker Jitsi Meet docker-jitsi-meet stable-4384-1, which stems from the use of default passwords e.g. passw0rd for system...

CVE-2020-11878

CVE-2020-11878 affects the Jitsi Meet docker-jitsi-meet stack prior to stable-4384-1, where system accounts used default passwords (e.g., passw0rd). The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/OSV), with high to critical severity in CVSS metrics. Impact is authentica...

CVE-2020-11878: Use of Hard-coded Credentials

The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...

PT-2020-12912

Name of the Vulnerable Software and Affected Versions Jitsi Meet aka docker-jitsi-meet versions prior to stable-4384-1 Description The issue concerns the use of default passwords for system accounts in the Jitsi Meet stack on Docker. Specifically, default passwords such as passw0rd are used. Ther...