Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1jcW02LWhyZ3EtNjg2Oc4AASbK

Apache OpenMeetings has Inadequate Encryption Strength

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

Permalink: https://github.com/advisories/GHSA-cqm6-hrgq-6869
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jcW02LWhyZ3EtNjg2Oc4AASbK
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago

CVSS Score: 9.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-cqm6-hrgq-6869, CVE-2017-7673
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-7673
• http://markmail.org/message/3hshl26omwjo6c5i
• http://www.securityfocus.com/bid/99587
• https://github.com/advisories/GHSA-cqm6-hrgq-6869

Blast Radius: 0.0

Affected Packages