General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-27612 | Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information… | Medium (4.3) | 2020-10-21 | General Purpose |
| CVE-2020-27611 | BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint. | High (7.3) | 2020-10-21 | General Purpose |
| CVE-2020-27610 | The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external int… | High (7.5) | 2020-10-21 | General Purpose |
| CVE-2020-27609 | BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface.… | Medium (5.3) | 2020-10-21 | General Purpose |
| CVE-2020-27608 | In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, … | Medium (6.1) | 2020-10-21 | General Purpose |