CVE-2020-27607

In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data from the client

published October 21, 2020

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data from the client. It does not directly configure the client to stop sending audio data to the server, and thus a modified server could store the audio data and/or transmit it to one or more meeting participants or other third parties.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Published
2020-10-21T14:08Z
EPSS history
Timeline
  • 21 OCT 14:08Z
    In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data from the client
    cvelistv5