CVE-2017-7688

Apache OpenMeetings 1.0.0 updates user password in insecure manner.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
apacheopenmeetings
1.0.0
apacheopenmeetings
2.0
apacheopenmeetings
2.1
apacheopenmeetings
2.1.1
apacheopenmeetings
2.2.0
apacheopenmeetings
3.0.0
apacheopenmeetings
3.0.1
apacheopenmeetings
3.0.2
apacheopenmeetings
3.0.3
apacheopenmeetings
3.0.4
apacheopenmeetings
3.0.5
apacheopenmeetings
3.0.6
apacheopenmeetings
3.0.7
apacheopenmeetings
3.1.0
apacheopenmeetings
3.1.1
apacheopenmeetings
3.1.2
apacheopenmeetings
3.1.3
apacheopenmeetings
3.1.4
apacheopenmeetings
3.1.5
apacheopenmeetings
3.2.0
apacheopenmeetings
3.2.1
𝑥
= Vulnerable software versions