CVE-2017-7673

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
apacheCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
apacheopenmeetings
1.0.0
apacheopenmeetings
2.0
apacheopenmeetings
2.1
apacheopenmeetings
2.1.1
apacheopenmeetings
2.2.0
apacheopenmeetings
3.0.0
apacheopenmeetings
3.0.1
apacheopenmeetings
3.0.2
apacheopenmeetings
3.0.3
apacheopenmeetings
3.0.4
apacheopenmeetings
3.0.5
apacheopenmeetings
3.0.6
apacheopenmeetings
3.0.7
apacheopenmeetings
3.1.0
apacheopenmeetings
3.1.1
apacheopenmeetings
3.1.2
apacheopenmeetings
3.1.3
apacheopenmeetings
3.1.4
apacheopenmeetings
3.1.5
apacheopenmeetings
3.2.0
apacheopenmeetings
3.2.1
𝑥
= Vulnerable software versions