Back to feed
EUVD-2022-3615 · Published May 13, 2022
Apache OpenMeetings has Inadequate Encryption Strength Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
Technologies
Apache Openmeetings
Weaknesses
CWE-326CWE-307
CVSS scores
- v3.09.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Persistence Privilege Escalation Stealth Credential Access
References
Potentially impacted assets
See if this affects your attack surface
