Race Condition Vulnerability in Janus WebRTC Gateway by Meetecho
CVE-2020-10577

4.8MEDIUM

Key Information:

Vendor

Meetecho

Status
Janus
Vendor
CVE Published:
14 March 2020

What is CVE-2020-10577?

A vulnerability in Janus WebRTC Gateway was identified that arises from improper handling of concurrent threads. Specifically, the issue is related to the incorrect use of the source property within a session. This mishandling can lead to a race condition during session management, potentially allowing unauthorized access or manipulation of session data. This flaw exists from version 0.9.1 of Janus and exposes critical session risk during simultaneous operations.

References

https://github.com/meetecho/janus-gateway/pull/1990
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.