Apache OpenMeetings updates user password in insecure manner

2022-05-1301:47:05

Google

osv.dev

0.001 Low

EPSS

Percentile

43.4%

JSON

Apache OpenMeetings 1.0.0 updates user password in insecure manner. This issue is fixed in version 3.3.0.

CPENameOperatorVersion
org.apache.openmeetings:openmeetings-parenteq3.1.5
org.apache.openmeetings:openmeetings-parenteq3.2.0
org.apache.openmeetings:openmeetings-parenteq3.2.1
org.apache.openmeetings:openmeetings-parenteq3.1.4
org.apache.openmeetings:openmeetings-parenteq3.1.3
org.apache.openmeetings:openmeetings-parenteq3.1.2

Name	Operator	Version
org.apache.openmeetings:openmeetings-parent	eq	3.1.5
org.apache.openmeetings:openmeetings-parent	eq	3.2.0
org.apache.openmeetings:openmeetings-parent	eq	3.2.1
org.apache.openmeetings:openmeetings-parent	eq	3.1.4
org.apache.openmeetings:openmeetings-parent	eq	3.1.3
org.apache.openmeetings:openmeetings-parent	eq	3.1.2