CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@apache.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-307, CWE-326

Affected products

• Openmeetings (Apache)
• Apache Openmeetings (Apache Software Foundation)

References

• http://markmail.org/message/3hshl26omwjo6c5i
• http://www.securityfocus.com/bid/99587