Vulnerabilities > CVE-2020-27610 - Unspecified vulnerability in Bigbluebutton

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

bigbluebutton

NVD

Published: 2020-10-21

Updated: 2024-11-21

Summary

The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external interfaces, and does not automatically set up a firewall configuration to block external access.

Vulnerable Configurations

Part	Description	Count
Application	Bigbluebutton Bigbluebutton Bigbluebutton - Bigbluebutton Bigbluebutton 0.7 Bigbluebutton Bigbluebutton 0.8 Bigbluebutton Bigbluebutton 0.9.0 Bigbluebutton Bigbluebutton 0.9.1 Bigbluebutton Bigbluebutton 0.9.2 Bigbluebutton Bigbluebutton 0.71 Bigbluebutton Bigbluebutton 0.81 Bigbluebutton Bigbluebutton 1.0.0 Bigbluebutton Bigbluebutton 1.1.0 Bigbluebutton Bigbluebutton 2.0 Bigbluebutton Bigbluebutton 2.2.0 Bigbluebutton Bigbluebutton 2.2.1 Bigbluebutton Bigbluebutton 2.2.2 Bigbluebutton Bigbluebutton 2.2.3 Bigbluebutton Bigbluebutton 2.2.4 Bigbluebutton Bigbluebutton 2.2.5 Bigbluebutton Bigbluebutton 2.2.6 Bigbluebutton Bigbluebutton 2.2.7 Bigbluebutton Bigbluebutton 2.2.8 Bigbluebutton Bigbluebutton 2.2.9 Bigbluebutton Bigbluebutton 2.2.10 Bigbluebutton Bigbluebutton 2.2.11 Bigbluebutton Bigbluebutton 2.2.12 Bigbluebutton Bigbluebutton 2.2.14 Bigbluebutton Bigbluebutton 2.2.15 Bigbluebutton Bigbluebutton 2.2.16 Bigbluebutton Bigbluebutton 2.2.17 Bigbluebutton Bigbluebutton 2.2.18 Bigbluebutton Bigbluebutton 2.2.19 Bigbluebutton Bigbluebutton 2.2.20 Bigbluebutton Bigbluebutton 2.2.21 Bigbluebutton Bigbluebutton 2.2.22 Bigbluebutton Bigbluebutton 2.2.23 Bigbluebutton Bigbluebutton 2.2.24 Bigbluebutton Bigbluebutton 2.2.25 Bigbluebutton Bigbluebutton 2.2.26 Bigbluebutton Bigbluebutton 2.2.27 Bigbluebutton Bigbluebutton 2.2.28	84

Summary

Vulnerable Configurations

References