Apache OpenMeetings has Inadequate Encryption Strength

2022-05-1301:47:04

Google

osv.dev

0.001 Low

EPSS

Percentile

48.0%

JSON

Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

CPENameOperatorVersion
org.apache.openmeetings:openmeetings-parenteq3.1.5
org.apache.openmeetings:openmeetings-parenteq3.2.0
org.apache.openmeetings:openmeetings-parenteq3.2.1
org.apache.openmeetings:openmeetings-parenteq3.1.4
org.apache.openmeetings:openmeetings-parenteq3.1.3
org.apache.openmeetings:openmeetings-parenteq3.1.2

Name	Operator	Version
org.apache.openmeetings:openmeetings-parent	eq	3.1.5
org.apache.openmeetings:openmeetings-parent	eq	3.2.0
org.apache.openmeetings:openmeetings-parent	eq	3.2.1
org.apache.openmeetings:openmeetings-parent	eq	3.1.4
org.apache.openmeetings:openmeetings-parent	eq	3.1.3
org.apache.openmeetings:openmeetings-parent	eq	3.1.2