CVE-2017-1000221

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access…

published November 17, 2017

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role ROLE_USER will have access to recordings published only for ROLE_USER_X.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00764 · 54.9th percentile
Published
2017-11-17T22:00Z
EPSS history
Timeline
  • 17 NOV 22:00Z
    In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access…
    cvelistv5