Lucene search
Veracode Vulnerability DatabaseVERACODE:4584HistoryJul 17, 2017 - 9:16 p.m.
Insecure Password Updates
2017-07-1721:16:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
43.4%
openmeetings-db does not securely update passwords. When updating a password for a user, it does not check that the Crypt is up to date, resulting in the password not being saved securely.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openmeetings db | le | 3.2.1 |
Related
cve
cve
CVE-2017-7688
2017-07-17 13:18:30
github
github
Apache OpenMeetings updates user password in insecure manner
2022-05-13 01:47:05
cvelist
cvelist
CVE-2017-7688
2017-07-13 00:00:00
osv
osv
Apache OpenMeetings updates user password in insecure manner
2022-05-13 01:47:05
CVE-2017-7688
2017-07-17 13:18:30
prion
prion
Default credentials
2017-07-17 13:18:00
nvd
nvd
CVE-2017-7688
2017-07-17 13:18:30
openvas
openvas
Apache OpenMeetings < 3.3.0 Multiple Vulnerabilities
2017-10-05 00:00:00