Access Control Weakness in Apache Guacamole by Apache

CVE-2020-11997

Summary

Apache Guacamole versions 1.2.0 and earlier exhibit an access control weakness where connection history is not adequately restricted by user permissions. In scenarios where multiple users have access to the same connection, these users can unintentionally observe the connection history, including the identities of other users and their respective IP addresses, despite not having the necessary permissions to view such sensitive information.

References