CVE-2017-7673

—

CVSS 3.0

9.8 critical

EPSS

2%p75

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

Vendors: apache
Products: openmeetings
Weakness: CWE-307, CWE-326
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.