CVE-2020-27612

{"id": "CVE-2020-27612", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2020-10-21T15:15:27.517", "references": [{"url": "https://docs.bigbluebutton.org/admin/privacy.html", "tags": ["Not Applicable"], "source": "cve@mitre.org"}, {"url": "https://docs.bigbluebutton.org/admin/privacy.html", "tags": ["Not Applicable"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a room, or an information leak to outsiders if any user publishes a screenshot of a browser window."}, {"lang": "es", "value": "Greenlight en BigBlueButton versiones hasta 2.2.8, coloca los nombres de usuario en las URL de la sala, lo que puede representar un filtrado de informaci\u00f3n involuntario para los usuarios en una sala, o un filtrado de informaci\u00f3n para los extra\u00f1os si alg\u00fan usuario publica una captura de pantalla de una ventana del navegador"}], "lastModified": "2024-11-21T05:21:28.033", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFDA0178-046A-4806-9AA6-5A7DF87FB382", "versionEndIncluding": "2.2.28"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}