CVE-2020-27613

The installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the FreeSWITCH password, which allows local users to achieve unintended FreeSWITCH access.
Configurations

Configuration 1 (hide)

cpe:2.3:a:bigbluebutton:bigbluebutton:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-10-21 15:15

Updated : 2024-02-28 18:08


NVD link : CVE-2020-27613

Mitre link : CVE-2020-27613

CVE.ORG link : CVE-2020-27613


JSON object : View

Products Affected

bigbluebutton

  • bigbluebutton
CWE
CWE-312

Cleartext Storage of Sensitive Information