Vulnerability Details CVE-2020-27601
In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.8%
CVSS Severity
CVSS v3 Score 3.5
References
- https://github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1
- https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7
- https://github.com/bigbluebutton/bigbluebutton/commit/7dcdfb191373684bafa7b11cdd0128c9869040a1
- https://github.com/bigbluebutton/bigbluebutton/compare/v2.2.6...v2.2.7
Products affected by CVE-2020-27601
-
cpe:2.3:a:bigbluebutton:bigbluebutton:-
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.7
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.71
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.8
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.81
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.0
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.1
-
cpe:2.3:a:bigbluebutton:bigbluebutton:0.9.2
-
cpe:2.3:a:bigbluebutton:bigbluebutton:1.0.0
-
cpe:2.3:a:bigbluebutton:bigbluebutton:1.1.0
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.0
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.0
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.1
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.2
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.3
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.4
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.5
-
cpe:2.3:a:bigbluebutton:bigbluebutton:2.2.6