NetSight
critical9.8

CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing br…

Impact

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

Affected products

VendorProductAffected versions
ApacheOpenmeetings
Versions 1.0.0, 2.0, 2.1, 2.1.1, 2.2.0, 3.0.0

Weakness classification

References