CVE-2017-7673

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Apache OpenMeetings version 1.0.0 uses weak cryptographic storage mechanisms. Additionally, the lack of captcha in registration and password reset forms, as well as missing brute force protection in authentication forms, increases the risk.

Risk Assessment

Weak cryptographic protections and lack of appropriate security mechanisms may lead to unauthorized access to user accounts and data breaches.

Recommendation

It is recommended to implement stronger cryptographic mechanisms, introduce captcha in forms, and deploy brute force protection.

Original NVD description (English source)

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.