PT-2022-20479

CVE-2022-31039

·

Published

2022-06-27

·

Updated

2022-07-07

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Greenlight versions prior to 2.12.6
Description Greenlight is a simple front-end interface for a BigBlueButton server. In affected versions, an attacker can view any room's settings, even though they are not authorized to do so. Only the room owner and administrator should be able to view a room's settings.
Recommendations For versions prior to 2.12.6, update to release version 2.12.6 to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-PHH8-3V6V-7498
Found an issue in the description? Have something to add? Feel free to write us 👾