CVE:CVE-2022-41964
CNNVD:CNNVD-202212-3424
BigBlueButton是BigBlueButton社区的一套开源的Web会议系统。
BigBlueButton 2.4.0之前版本存在信息泄露漏洞，攻击者利用该漏洞可以在开始匿名投票之前开始订阅投票结果，并使用此订阅查看匿名投票中的个人响应。
solution:Upgrade bigbluebutton bigbluebutton to a higher version than 2.4:alpha1,2.4:alpha2,2.4:beta1,2.4:beta2,2.4:beta3,2.4:beta4,2.4:rc1,2.4:rc2,2.4:rc3,2.4:rc4,2.4:rc5,2.4:rc6,2.4:rc7,and avoid the version 2.4:alpha1,2.4:alpha2,2.4:beta1,2.4:beta2,2.4:beta3,2.4:beta4,2.4:rc1,2.4:rc2,2.4:rc3,2.4:rc4,2.4:rc5,2.4:rc6,2.4:rc7