Description
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
Remediation
References
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6100)
MySQL CVE-2018-2758 Vulnerability (CVE-2018-2758)
WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.31)
MySQL CVE-2012-0494 Vulnerability (CVE-2012-0494)
WordPress Plugin Essential Blocks Pro Multiple PHP Object Injection Vulnerabilities (1.1.0)