CVE Vulnerabilities

CVE-2017-7688

Published: Jul 17, 2017 | Modified: Apr 20, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Apache OpenMeetings 1.0.0 updates user password in insecure manner.

Affected Software

NameVendorStart VersionEnd Version
OpenmeetingsApache1.0.0 (including)1.0.0 (including)
OpenmeetingsApache2.0 (including)2.0 (including)
OpenmeetingsApache2.1 (including)2.1 (including)
OpenmeetingsApache2.1.1 (including)2.1.1 (including)
OpenmeetingsApache2.2.0 (including)2.2.0 (including)
OpenmeetingsApache3.0.0 (including)3.0.0 (including)
OpenmeetingsApache3.0.1 (including)3.0.1 (including)
OpenmeetingsApache3.0.2 (including)3.0.2 (including)
OpenmeetingsApache3.0.3 (including)3.0.3 (including)
OpenmeetingsApache3.0.4 (including)3.0.4 (including)
OpenmeetingsApache3.0.5 (including)3.0.5 (including)
OpenmeetingsApache3.0.6 (including)3.0.6 (including)
OpenmeetingsApache3.0.7 (including)3.0.7 (including)
OpenmeetingsApache3.1.0 (including)3.1.0 (including)
OpenmeetingsApache3.1.1 (including)3.1.1 (including)
OpenmeetingsApache3.1.2 (including)3.1.2 (including)
OpenmeetingsApache3.1.3 (including)3.1.3 (including)
OpenmeetingsApache3.1.4 (including)3.1.4 (including)
OpenmeetingsApache3.1.5 (including)3.1.5 (including)
OpenmeetingsApache3.2.0 (including)3.2.0 (including)
OpenmeetingsApache3.2.1 (including)3.2.1 (including)

References