CVE-2017-1000221

CVE-2017-1000221 describes an access control vulnerability in Opencast versions 2.2.3 and older, where the search service incorrectly handles user names, allowing unauthorized access to recordings. Specifically, if user names overlap, a user with a partial match to an access-restricted role can bypass intended permissions. This medium-severity vulnerability (CVSS 6.5) has a low attack complexity and requires low privileges, potentially leading to high confidentiality impact by exposing restricted content. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.