Unrated severityNVD Advisory· Published Oct 21, 2020· Updated Aug 4, 2024

CVE-2020-27606

Description

BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

BigBlueButton/BigBlueButtondescription
Bigbluebutton/Bigbluebuttonllm-fuzzy
Range: <2.2.28

Patches

Vulnerability mechanics

References

www.golem.de/news/big-blue-button-das-grosse-blaue-sicherheitsrisiko-2010-151610.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000