CVE-2017-7688: High severity apache openmeetings vulnerability
Published Jul 14, 2017
·Updated
Apache OpenMeetings 1.0.0 updates user password in insecure manner.
Affected Software
21 affected components
Apache OpenMeetings=1.0.0
Apache OpenMeetings=2.0
Apache OpenMeetings=2.1
Apache OpenMeetings=2.1.1
Apache OpenMeetings=2.2.0
Apache OpenMeetings=3.0.0
Apache OpenMeetings=3.0.1
Apache OpenMeetings=3.0.2
Apache OpenMeetings=3.0.3
Apache OpenMeetings=3.0.4
Apache OpenMeetings=3.0.5
Apache OpenMeetings=3.0.6
Apache OpenMeetings=3.0.7
Apache OpenMeetings=3.1.0
Apache OpenMeetings=3.1.1
Apache OpenMeetings=3.1.2
Apache OpenMeetings=3.1.3
Apache OpenMeetings=3.1.4
Apache OpenMeetings=3.1.5
Apache OpenMeetings=3.2.0
Apache OpenMeetings=3.2.1
Event History
Jul 14, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-7688?
CVE-2017-7688 is categorized as a medium severity vulnerability due to insecure password handling.
2
How do I fix CVE-2017-7688?
To mitigate CVE-2017-7688, upgrade Apache OpenMeetings to a version that addresses this vulnerability.
3
Which versions of Apache OpenMeetings are affected by CVE-2017-7688?
CVE-2017-7688 affects Apache OpenMeetings versions 1.0.0, 2.0, 2.1, 2.1.1, 2.2.0, and all versions from 3.0.0 to 3.2.1.
4
What type of vulnerability is CVE-2017-7688?
CVE-2017-7688 is a security vulnerability related to improper password storage resulting in potential unauthorized access.
5
Is there a public exploit for CVE-2017-7688?
As of now, there are no known public exploits specifically targeting CVE-2017-7688.