CVE-2020-27611

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 21-10-2020 05:15

Last modified: - 15-06-2022 05:16

Total changes: - 3

Description

BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.3

Base score

3.9

3.4

Exploitability score

Impact score

Verification logic

vendor=bigbluebutton AND product=bigbluebutton AND version=-

vendor=bigbluebutton AND product=bigbluebutton AND version=0.7

vendor=bigbluebutton AND product=bigbluebutton AND version=0.71 AND update=-

vendor=bigbluebutton AND product=bigbluebutton AND version=0.71 AND update=a

vendor=bigbluebutton AND product=bigbluebutton AND version=0.8 AND update=-

vendor=bigbluebutton AND product=bigbluebutton AND version=0.8 AND update=rc2

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=-

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=b

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=rc

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=rc2

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=rc3

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=rc4

vendor=bigbluebutton AND product=bigbluebutton AND version=0.81 AND update=rc5

vendor=bigbluebutton AND product=bigbluebutton AND version=0.9.0 AND update=beta

vendor=bigbluebutton AND product=bigbluebutton AND version=0.9.1

vendor=bigbluebutton AND product=bigbluebutton AND version=0.9.2

vendor=bigbluebutton AND product=bigbluebutton AND version=1.0.0

vendor=bigbluebutton AND product=bigbluebutton AND version=1.1.0

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=-

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc10

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc11

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc2

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc3

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc4

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc5

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc6

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc7

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc8

vendor=bigbluebutton AND product=bigbluebutton AND version=2.0 AND update=rc9

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=-

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta10

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta11

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta12

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta14

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta15

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta16

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta17

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta18

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta19

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta2

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta20

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta21

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta22

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta23

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta3

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta4

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta5

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta6

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta7

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta8

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=beta9

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc1

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc2

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc3

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc4

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc5

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.0 AND update=rc6

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.1

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.10

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.11

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.12

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.14

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.15

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.16

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.17

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.18

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.19

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.2

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.20

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.21

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.22

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.23

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.24

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.25

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.26

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.27

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.28

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.3

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.4

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.5

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.6

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.7

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.8

vendor=bigbluebutton AND product=bigbluebutton AND version=2.2.9

Reference

Keywords

CVE-2020-27611

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-27611

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures