← CVE Intelligence

CVE-2024-38273

moodle: BigBlueButton web service leaks meeting joining information to users who should not have access PUBLISHED

Description (CNA)

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.

Affected (CNA)

Vendor / productVersions
Moodle / Moodleaffected 4.4; affected 4.3 through 4.3.4; affected 4.2 through 4.2.7; affected 4.1 through 4.1.10

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.