CVE-2017-7673

Description

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.405

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in Apache - openmeetings-parent 3.3.0	Windows
Multiple vulnerabilities are fixed in Apache - openmeetings-parent for Linux 3.3.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234