CVE-2022-31039CWE-269

Improper privilege management - Anyone can view room settings in GreenLight

Medium · published June 27, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

Greenlight is a simple front-end interface for your BigBlueButton server. In affected versions an attacker can view any room's settings even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings. This issue has been patched in release version 2.12.6.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00693 · 52.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-06-27T19:25Z
EPSS history
Timeline
  • 27 JUN 19:25Z
    Improper privilege management - Anyone can view room settings in GreenLight
    cvelistv5