漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
BigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data
Vulnerability Description
BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensitive Information Into Sent Data. The moderators-only webcams lock setting is not enforced on the backend, which allows an attacker to subscribe to viewers' webcams, even when the lock setting is applied. (The required streamId was being sent to all users even with lock setting applied). This issue is fixed in version 2.4-rc-6. There are no workarounds.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
通过发送数据的信息暴露
Vulnerability Title
BigBlueButton 安全漏洞
Vulnerability Description
BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。 BigBlueButton 2.4-rc-6之前版本存在安全漏洞，该漏洞源于存在将敏感信息插入发送数据的漏洞，后端不强制使用版主专用网络摄像头锁定设置，即使应用了锁定设置也允许攻击者订阅观众的网络摄像头。
CVSS Information
N/A
Vulnerability Type
N/A