CVE-2017-7688

Published: Jul 17, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Apache OpenMeetings 1.0.0 updates user password in insecure manner.

Affected (21)

Products: Apache: Openmeetings

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Apache Openmeetings	Version 1.0.0
Apache Openmeetings	Version 2.0
Apache Openmeetings	Version 2.1.1
Apache Openmeetings	Version 2.1
Apache Openmeetings	Version 2.2.0
Apache Openmeetings	Version 3.0.0
Apache Openmeetings	Version 3.0.1
Apache Openmeetings	Version 3.0.2
Apache Openmeetings	Version 3.0.3
Apache Openmeetings	Version 3.0.4
Apache Openmeetings	Version 3.0.5
Apache Openmeetings	Version 3.0.6
Apache Openmeetings	Version 3.0.7
Apache Openmeetings	Version 3.1.0
Apache Openmeetings	Version 3.1.1
Apache Openmeetings	Version 3.1.2
Apache Openmeetings	Version 3.1.3
Apache Openmeetings	Version 3.1.4
Apache Openmeetings	Version 3.1.5
Apache Openmeetings	Version 3.2.0
Apache Openmeetings	Version 3.2.1

References (4)

http://markmail.org/message/ctsiiqtekzsun6fi

Source: security@apache.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/99586

Source: security@apache.org

Third Party AdvisoryVDB Entry

http://markmail.org/message/ctsiiqtekzsun6fi

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/99586

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.