CVE-2017-1000221
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000221
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000221.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-1000221
- Aliases
- Published
- 2017-11-17T22:29:00Z
- Modified
- 2024-10-11T11:26:30Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restriction. For example, a user with the role ROLEUSER will have access to recordings published only for ROLEUSER_X.
- References