Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

VectorNETWORK

PublishedJul 17, 2017, 13:18

Published Bysecurity@apache.org

Base Score

Score9.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.apache.openmeetings:openmeetings-parent(Maven)1.0.03.3.0N/A

References

http://markmail.org/message/3hshl26omwjo6c5i
http://www.securityfocus.com/bid/99587

Weakness Type

CWE-307

CVSS Metrics

Base Score

9.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base SeverityCritical

Version

3.0

Attack Vector (AV)

NETWORK